Data Protection

Privacy Policy

I. Name and address of the responsible party

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States, as well as other data protection regulations, is:

harder-online GmbH

An der Borntelle 4

01619 Zeithain

Germany

Tel.: +49 751 561 68-0

E-Mail: info@labelprint24.com

Website: www.labelprint24.com, www.unserdrucker.de, www.partylabels24.com

II. Name and address of the Data Protection Officer

The Data Protection Officer of the responsible party is:

Toni Roscher

ASS Magerl GmbH

Otto-Schmerbach-Str. 17

09117 Chemnitz

Germany

Tel.: 0371 - 774 10 60

E-Mail: mail@ass-magerl.de

Website: www.ass-magerl.de

III. General information on data processing

1. The scope of processing personal data

We collect and utilise our user’s personal data only insofar as this is necessary for provision of an operational site and of our content and services. Collection and utilisation of our user’s personal data is only undertaken periodically with the user's consent. An exception applies in those cases where prior consent cannot be obtained for legal or circumstantial reasons and the processing of the data is permitted by law.

2. Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for processing their personal data, Art. 6 Para. 1 a) of the EU General Data Protection Regulation (GDPR) serves as legal basis.

In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 para. GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c of the GDPR applies as the legal basis.

In the event that vital interests of the data subject or another natural person require a processing of personal data, Art. 6 para. 1 d) of the GDPR applies as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR applies as the legal basis for processing.

3. Data deletion and storage duration

The personal data of a data subject will be deleted or blocked as soon as the purpose of storage ceases to exist. Furthermore, data may be stored if this has been provided by the European or national legislation in EU regulations, laws or other provisions to which the data controller is subject. We will block or delete data once the prescribed retention period has expired, unless its continued storage is necessary for entering into or fulfilling a contractual relationship.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

1. Information regarding the used browser type and version

2. The user’s operating system

3. The user's Internet service provider

4. The user's IP address

5. Date and time of access

6. Websites from which the user's system accesses our website

7. The websites accessed by the user's system via our website

8. Amount of transmitted data

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for temporary storage of data and log files is Art. 6 Para. 1 lit. f, GDPR.

3. Purpose of the data processing

Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the website's functionality. The data are also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.

These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f, GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. When collecting the data for providing the website with it, this is the case when the respective session is completed.

If the data is stored in log files, this will be undertaken after 30 days at the latest. Further storage is possible. In this case, the user's IP addresses will be deleted or distorted, so that assignment of the accessing client is no longer possible.

5. Objection and removal option

Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there is no option to object on the part of the user.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the browser's accessing can be identified even after changing the page.

The following data is stored and transmitted in the cookies:

1. Language settings

2. Log-in information (SessionID)

3. Product calculator settings

We also use cookies on our website to analyse user behaviour.

The following data can be transmitted in this way:

1. Search terms entered

2. Frequency of page views

3. Use of website functions

4. Purchases made

The user data collected in this way is pseudonymised with technical means. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with the user's other personal data.

Cookies are also stored by other organisations (so-called "third-party cookies"). These cookies originate from:

1. Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") - Analysis of user behaviour on the website, youtube video service, display of advertising content (remarketing)

2. eKomi, Ltd, Markgrafenstraße 11, 10969 Berlin, Germany ("eKomi") – Display of customer ratings

3. Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook") - Presentation of social media plugins and analysis of user behaviour
    

These cookies are partly for technical, analytical and advertising purposes. More details about cookies from Google, Facebook and eKomi can be found here:

https://policies.google.com/technologies/types?hl=en 

https://www.facebook.com/about/privacyshield

https://www.ekomi.co.uk/uk/privacy/ 

2. The Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6 1 lit. f, GDPR.

3. The purpose of data processing

The purpose of using technically necessary cookies is to simplify use of websites for users. Some features of our website are not offered without the use of cookies. For these features it is necessary that the browser be recognised even after changing the page.

We require cookies for the following applications:

1. Shopping cart

2. Applying language settings

3. Remember calculator settings

The user data collected by technically necessary cookies is not used to create user profiles.

The analysis cookies are used to improve the quality of our website and its content. By analysing cookies, we learn how the site is used and can constantly optimise our service. This also gives us necessary info allowing us to find weak points of our descriptions faster. The reviews from other users give our customers independent information about the services and products we offer.

For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f, GDPR.

4. Duration of storage, objection and removal option

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features.

VI. Newsletter

1. Description and scope of data processing

You can subscribe to a free newsletter on our website. The data from the contact form is transmitted to us when you subscribe to the newsletter. Consent can also be given during the registration process:

1. Email address

2. User name

The following data will also be collected upon subscription:

1. IP address of the accessing computer

2. Date and time of registration

3. Preferred language and currency

During the subscription process, your consent is obtained for processing data and reference is made to this privacy policy.

If you purchase goods or services on our website and provide us with your email address, we may subsequently use it to send you a newsletter. In such a case, only direct marketing of our own similar products or services will be sent via the newsletter.

Management of data used for newsletter registration and the distribution of newsletters takes place via a third-party service provider - CleverReach GmbH & Co. KG. The data will be used exclusively for sending the newsletter.

2. The Legal basis for data processing

The legal basis for processing data after the user registers for the newsletter is, if the user's consent to this has been obtained, Art. 6 Para. 1 (a) of the GDPR.

The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 Para. 3 UWG (Unfair Competition Act).

3. Purpose of the data processing

The user's email address is collected in order to deliver the newsletter.

Collection of other personal data as part of the registration process is for preventing misuse of the services or of the used email address.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary for achieving the purpose for which they were collected. The user's email address will, therefore, be stored for as long as the subscription to the newsletter is active.

5. Objection and removal option

The subscription to the newsletter can be cancelled by the relevant user at any time. A relevant link can be found in every newsletter for this purpose.

VII. Registration and order process

1. Description and scope of data processing

On our website, we offer users the ability to register with the entry of personal data. The data is entered into a contact form, transmitted to us, and stored. A transfer of the data to third parties will not take place, as long as this is not necessary for the fulfilment of the contract. The following data is collected during the registration process:

1. Email address

2. First and last name

3. Chosen title

IThe following data is stored during registration:

1. Date and time of registration

In addition, after registration in the user's account or during the ordering process, the user can determine invoice/delivery address information:

1. Email address

2. First and last name

3. optional - company name

4. Street and house number for the address

5. City and postal code

6. Country

7. optional - VAT identification number

As part of the registration process or order process, the consent of the user to process this data is obtained.

If the user chooses Paypal during the order process, they will be redirected to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "Paypal") during the order process. The data entered here will then be processed by Paypal. For further information about Paypal visit:

https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

The data may also be forwarded to other companies in the Harder group, if necessary for processing contact info or processing the order process.

2. The Legal basis for data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 a) GDPR.

If registration is for fulfilment of a contract (order) to which the user is a party or for implementation of pre-contractual measures, an additional legal basis for the data processing is Art. 6, Para. 1 b) GDPR.

3. The purpose of data processing

The user's registration is necessary for the provision of certain contents and services on our website in order to:

1. display materials and finishing options and settings assigned to the user

2. consider discounts set to the user

3. offer the user assigned payment options.

Registration of the user and entry of the billing and delivery address is required to fulfil a contract with the user or for the implementation of pre-contractual measures.

Delivery address is required in order to deliver this to the courier service/forwarding agent/logistics company or subcontractor of the goods in order to deliver the goods to the correct address.

The billing address is required to generate an invoice in accordance with UStG (German Tax Act).

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

This is the case for the data collected during the registration process, if registration on our website is withdrawn or amended.

This is the case for data collected during the registration process for fulfilment of a contract or implementation of pre-contractual measures, if the data is no longer necessary for fulfilment of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.

After the expiry of this period, the data in question is routinely deleted so long as it is no longer necessary for the fulfilment of the contract or initiating the contract and/or there is no legitimate interest on our part to store it further.

5. Objection and removal option

As a user you have the option of cancelling the registration at any time. You may change the data stored about you, at any time.

For this purpose, the user can use Account Administration or contact us at the above mentioned e-mail address.

If the data is required for the fulfilment of a contract or the implementation of pre-contractual measures, early erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.

VIII. Contact form and email contact

1. Description and scope of data processing

There is a contact form on our website which can be used for electronic contact. If a user accepts this option, the data entered in the input screen will be transmitted to us and stored. This data is:

For the support form:

1. Email adress

2. Optional telephone number

For the contact/request form:

1. Title

2. First and last name

3. optional - company

4. optional - department and position in the company

5. Address (street, city, postal code, country)

6. Email

7. Telephone/ optional - fax

8. Information on the product/contact

The following data is also stored at the time the message is sent:

1. Page from which the form was sent

2. Date and time of sending

When you submit the form, we ask your consent to process your data, with a link to this privacy policy.

Alternatively, you can contact us via the email address provided. In this case, the user's personal data which are transmitted along with the email will be stored.

The data entered in the form, or emailed data, may be editable by Google as we use Google Cloud services. More information can be found here:

https://policies.google.com/

The data may also be forwarded to other companies of the Harder group, if this is necessary for processing the contact or processing the order process.

2. The Legal basis for data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a) of the GDPR.

The legal basis for processing the data transferred in the course of sending an email is Art. 6 para. 1 lit. f) of the GDPR. If you send us an e-mail with the intention to enter into a contract with us, this creates an additional legal basis for its processing per Art. 6 para. 1 (b) of the GDPR.

3. The Purpose of Data Processing

The processing of personal data in the input screen is used by us only for processing the contact. In the event of contact by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process is for preventing misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by email, this is the case when the respective conversation with the user has been completed. The conversation is terminated when the circumstances indicate that the matter in question has been finally resolved.

After the expiry of this period, the data in question is routinely deleted so long as it is no longer necessary for the fulfilment of the contract or initiating the contract and/or there is no legitimate interest on our part to store it further.

5. Objection and removal option

The user has the option of revoking his or her consent to the processing of personal data at any time. A user who has contacted us by e-mail can object at any time to the storage of his or her personal data. It will not be possible to continue the conversation in this case.

To revoke the consent, it is sufficient to contact us by email or by post. In this case, all personal data stored when establishing contact with us shall be deleted.

IX. Customer review

1. Description and scope of data processing

We ask our customers twice a year for their opinion on the order they have placed. The opinion goes to eKomi, Ltd., Markgrafenstraße 11, 10969 Berlin, Germany ("eKomi"). We provide anonymous data to eKomi and send the customer an e-mail with a link to eKomi. Participation in the review is voluntary. If the user decides to participate in the review, the data provided by them will be transmitted to eKomi. Since the specification of data is voluntary, only the data the customer wants to specify is transferred.

When sending the e-mail, the following data is used:

     1) E-mail address
     2) ID of the order placed

2. The Legal basis for data processing

The basis for sending the query e-mail is Art. 6 para. 1 lit. f, GDPR. The basis for transferring data to eKomi is Art. 6 para. 1 a) GDPR.

3. The purpose of data processing

Invitation to participate in the customer review will be sent to obtain the customer's opinions. The data gives us the opportunity to send the email and to examine the matter internally as needed, thereby improving our products and services.

The customer reviews help other customers to get information about our products and services.

4. Duration of storage

The sent e-mail invitations will be deleted immediately after sending.

The voluntarily given customer reviews are deleted by eKomi on a regular basis.

5. Objection and removal option

Survey of user reviews can be revoked at any time at the above email address.

You can revoke your consent to the publication of personal data at any time with eKomi. Further information:

https://www.ekomi.co.uk/uk/privacy/

X. Right of the data subject

If your personal data is processed, you are a data subject as defined by the GDPR and you have the following rights with respect to the data controller:

1. The right to information

You can request that the responsible party confirm whether we will process personal data that concerns you.

If such processing takes place, you can request the following information from the data controller:

(1) the purposes for which the personal data is being processed;

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom your personal data has been or will be disclosed;

(4) how long the controller plans to store your personal data, or, if specific information in this respect is not possible, the controller's criteria for determining the storage period;

(5) the existence of a right to correct or have your personal data deleted or to restrict its processing by the data controller or to object to such processing;

(6) the existence of the right to lodge a complaint with a supervisory authority

(7) any available information on the origin of the data if the personal data has not been collected from the person concerned;

(8) the existence of automated decision-making, including profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and - at least in these cases- meaningful information on the logic involved and the scope and intended effects of such processing for the person concerned.

You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.

2. The right of rectification

You have a right of rectification and/or completion with respect to the responsible party if the personal data processed concerning you is incorrect or incomplete. The responsible party must make the correction immediately.

3. The right to restriction of processing

Under the following conditions, you may request that the processing of your personal data be restricted:

(1) if you contest the accuracy of your personal data, for as long as it takes the data controller to verify its accuracy;

(2) if the processing is unlawful and you refuse to have the data deleted and instead wish to restrict its use;

(3) the party responsible no longer needs the personal data for processing purposes, but you need it to establish, exercise, or defend legal claims; or

(4) you have objected to processing in accordance with Art. 21 para. 1 GDPR and it is not yet clear whether the data controller's legitimate reasons for processing your data outweigh your interests..

Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.

If the processing restriction has been restricted in accordance with the above conditions, you will be informed by the responsible party before the restriction has been lifted.

4. The right to deletion (right to be forgotten)

A. Obligation to delete data

You have the right to demand that the data controller delete your personal data without delay. The data controller is required to delete personal data without delay when one of these conditions applies:

(1) Your personal data is no longer necessary for the purposes for which it was originally collected or otherwise processed;

(2) You revoke your consent to its processing per Art. 6 para. 1 lit. a) or Art. 9 para. 2 (a) of the GDPR was based and there is no other legal basis for processing.

(3) You object to processing in accordance with Art. 21 para. 1 of the GDPR, and there are no overriding legitimate grounds for processing, or you submit an objection to processing in accordance with Art. 21 para. 2 of the GDPR.

(4) Your personal data has been processed unlawfully.

(5) The deletion of personal data is required in order to comply with legal obligations according to EU or national law applicable to the party responsible.

(6) Your personal data has been collected in connection with services offered by an information company per Art. 8 para. 1 of the GDPR.

B.Transfer of personal data to third parties

If the data controller has made your personal data public and is required to delete it under Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that the data subject has requested the deletion of all links to this personal data as well as any copies thereof.

C. Exceptions

The right to deletion does not exist if processing is necessary:

(1)  to exercise the right to freedom of expression and information;

(2) to fulfil a legal obligation that requires processing under the law of the Union or of the Member States to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;

(3) for reasons of public interest with regard to public health in accordance with Art. 9 para. 2 (h) and (i), as well as Art. 9 para. 3 of the GDPR;

(4) for archiving, scientific, or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 para. 1 of the GDPR, to the extent that the right referred to in a) is likely to seriously inhibit or make achieving the purposes of such processing impossible; or

(5) to assert, exercise, or defend legal claims.

5. Right to information

If you have exercised your right to have the responsible party correct, delete or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

It is your right to have the responsible party inform you regarding such recipients.

6. The right of data portability

You have the right to obtain your personal data, which you have provided to the responsible party, in a structured, conventional and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from its original controller if

(1) the processing is based on consent given in accordance with Art. 6 para. 1 lit. a) of the GDPR or Art. 9 para. 2 (a) of the GDPR or on a contract in accordance with Art. 6 para. 1 (b) of the GDPR and

(2) the processing is carried out using automated methods.

In exercising this right, you shall have the right to have the personal data transmitted directly from one responsible party to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.

7. The right of objection

You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 Para. 1 lit. e) or lit. f) of the GDPR; the same applies to profiling based on these provisions.

The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.t.

If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.

You have the option of exercising your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

8. The right to revoke the data protection declaration of consent

You have the right at any time to revoke your data protection declaration of consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its revocation.

9. Automated decision in individual cases, including profiling

You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This shall not apply if the decision:

(1)  is necessary to establish to fulfil a contract between you and the party responsible;

(2) is authorised by EU or national law applicable to the party responsible which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 of the GDPR, unless Art. 9 para. 2 lit. a) or g) of the GDPR and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.

In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party, to state his or her own position and to challenge the decision.

10. The right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.

The supervisory authority with which the appeal has been filed shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 of the GDPR.