Privacy policy

Privacy Policy / Personal Data Protection Policy

Data controller:
Ümit Erbakti
Heinrich-Hertz Str. 48
40699 Erkrath / Germany
info@wenatur.com
+49 211 828 313 69

Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information about how your data is processed.

ACCESS DATA AND HOSTING

You can visit our website without providing personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services. This serves to safeguard our legitimate interests in the proper presentation of our services in accordance with Article 6(1)(f) GDPR. All access data is deleted no later than seven days after the end of your visit to the website.

1.1 Hosting

The services required for hosting and displaying the website are partly provided by our service providers on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in forms provided for this purpose on this website are processed on the servers of our service providers. If you have questions about our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

1.2 Content Delivery Network

To reduce loading times, we use a Content Delivery Network (“CDN”) for some services. This service delivers, for example, large media files via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of the service providers. Our service providers act on our behalf under a data processing agreement. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

Our service providers are located in the following countries: China, India, Russia, USA.
No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on the following safeguards: Standard Contractual Clauses of the European Commission, standard data protection clauses of a supervisory authority.

Our service providers are also located in the following countries for which the European Commission has determined an adequate level of data protection: Jersey, Canada, Switzerland.

DATA PROCESSING FOR THE PERFORMANCE OF THE CONTRACT, COMMUNICATION AND OPENING A CUSTOMER ACCOUNT

We collect personal data when you voluntarily provide it to us as part of your order, when contacting us (for example via contact form or email), or when opening a customer account. Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract, handle your contact request, or open the customer account, and without this information you cannot complete the order, contact us, or open the account. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Article 6(1)(b) GDPR for contract processing and handling your requests.

If you decide to open a customer account and give your consent in accordance with Article 6(1)(a) GDPR, we will use your data for the purpose of opening the customer account. Further information about the processing of your data, in particular the transfer to our service providers for order, payment and shipping processing, can be found in the following sections of this privacy policy. After complete performance of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiration of the retention periods required under tax and commercial law in accordance with Article 6(1)(c) GDPR, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) GDPR or we reserve the right to further use data in a manner permitted by law and about which we inform you in this policy. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact address specified in this privacy policy or via a function provided for this purpose in the customer account.

DATA PROCESSING FOR ORDER HANDLING

For the performance of the contract in accordance with Article 6(1)(b) GDPR, we pass your data on to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the ordered goods.

TRANSFER OF SHIPPING INFORMATION TO THE SHIPPING SERVICE PROVIDER

If you have given us your express consent during or after placing your order, we will pass on your email address and telephone number to the selected shipping service provider in accordance with Article 6(1)(a) GDPR so that they can contact you before delivery for the purpose of delivery notification or coordination.

Consent can be withdrawn at any time by sending a message to the contact details stated in this privacy policy or directly to the shipping service provider at the contact address listed below. After withdrawal, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to further use it in a manner permitted by law and about which we inform you in this policy.

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany

General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1–7
DE-36286 Neuenstein
Germany

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

Hermes Germany GmbH
Essener Straße 89
D-22419 Hamburg
Germany

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

DATA PROCESSING FOR PAYMENT PROCESSING

For payment processing in our online store, we work with technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction handling

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers acting on our behalf under a data processing agreement, to the commissioned credit institutions, or to the selected payment service provider, insofar as this is necessary for payment processing. This serves the fulfillment of the contract in accordance with Article 6(1)(b) GDPR. In some cases, the payment service providers themselves collect the data necessary for payment processing, for example on their own website or via technical integration in the ordering process. In this case, the privacy policy of the respective payment service provider applies. If you have questions about our partners for payment processing and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

4.2 Data processing for fraud prevention and optimization of our payment processes

Where necessary, we provide our service providers with additional data that they use together with the data necessary for payment processing for fraud prevention and optimization of our payment processes, for example invoicing, processing disputed payments and accounting support. In accordance with Article 6(1)(f) GDPR, this serves to safeguard our legitimate interests in fraud prevention and efficient payment management.

4.3 Credit assessment

If you have given us your express consent in accordance with Article 6(1)(a) and Article 22(2)(c) GDPR, we reserve the right to obtain identity and creditworthiness information from specialized service providers. For this purpose, we transmit the personal data required for a credit check to:

Creditreform Boniversum GmbH
Hellersbergstraße 11
41460 Neuss
Germany

arvato infoscore GmbH
Rheinstraße 99
76532 Baden-Baden
Germany

SCHUFA Holding AG
Kormoranweg 5
65201 Wiesbaden
Germany

In this case, appropriate measures will be taken to safeguard your rights, freedoms and legitimate interests. You have the option of expressing your point of view and contesting the decision by contacting us via the contact details provided in this privacy policy. After complete fulfillment of the contract, your data processed for this purpose will be deleted unless you have expressly consented to further use or we reserve the right to further use data in a legally permitted manner. You may revoke your consent at any time by sending a message to the contact details below. This may result in us no longer being able to offer certain payment methods.

4.4 Identity and credit check when selecting Klarna payment services

If you choose Klarna payment services such as Klarna Pay now, Klarna Pay later or Klarna Slice it, we ask for your consent in accordance with Article 6(1)(a) GDPR that we may transmit the data necessary for payment processing and identity and credit assessment to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. In Germany, the credit agencies named in Klarna’s privacy policy may be used for identity and credit checks. Klarna uses the information obtained about the statistical probability of a payment default to make a balanced decision about the establishment, execution or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact details provided in this privacy policy. This may result in us no longer being able to offer certain payment methods. You can also revoke your consent to this use of personal data at any time directly towards Klarna.

4.5 Identity and credit check when selecting BillPay payment services

If you choose payment services provided by BillPay GmbH, Zinnowitzer Str. 1, 10115 Berlin, Germany, we ask for your consent in accordance with Article 6(1)(a) GDPR that we may transmit the data necessary for payment processing and identity and credit assessment to BillPay. In Germany, the credit agencies named in BillPay’s privacy policy may be used for identity and credit checks. BillPay uses the information obtained about the statistical probability of a payment default to make a balanced decision about the establishment, execution or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact details provided in this privacy policy. This may result in us no longer being able to offer certain payment methods. You can also revoke your consent directly towards BillPay at any time.

4.6 Identity and credit check when selecting purchase on invoice via PAYONE

If you choose the payment method purchase on invoice of PayOne GmbH, Lyoner Str. 9, 60528 Frankfurt am Main, Germany, we ask for your consent in accordance with Article 6(1)(a) GDPR that we may transmit the data necessary for payment processing and identity and credit assessment to PayOne. In Germany, the credit agencies named in PayOne’s privacy policy may be used for identity and credit checks. PayOne uses the information obtained about the statistical probability of a payment default to make a balanced decision about the establishment, execution or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact details provided in this privacy policy. This may result in us no longer being able to offer certain payment methods.

ADVERTISING BY EMAIL

5.1 Email newsletter with registration

If you subscribe to our newsletter, we use the data necessary for this purpose or separately provided by you in order to send you our email newsletter regularly on the basis of your consent in accordance with Article 6(1)(a) GDPR. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we will delete your email address from the list of recipients unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner permitted by law and about which we inform you in this policy.

5.2 Newsletter dispatch

The newsletter may also be sent by our service providers as part of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please use the contact details stated in this privacy policy.

Our service providers are located in the following country with an adequate level of data protection according to the European Commission: Canada.

Our service providers are also located in the USA. No adequacy decision by the European Commission exists for the USA. Our cooperation with them is based on the Standard Contractual Clauses of the European Commission.

COOKIES AND OTHER TECHNOLOGIES

General information

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies including cookies on various pages. Cookies are small text files automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser. Other cookies remain on your device and enable us to recognize your browser on your next visit.

We use such technologies that are absolutely necessary for the use of certain functions of our website, for example the shopping cart function. Through these technologies, IP address, time of visit, device and browser information as well as information about your use of our website, for example the content of the shopping cart, are collected and processed. This serves overriding legitimate interests in an optimized presentation of our offer in accordance with Article 6(1)(f) GDPR.

You can find the cookie settings for your browser at the following links:

Microsoft Edge
Safari
Chrome
Firefox
Opera

If you have consented to the use of technologies in accordance with Article 6(1)(a) GDPR, you can revoke your consent at any time by contacting us via the contact details stated in this privacy policy.

USE OF COOKIES AND OTHER TECHNOLOGIES FOR WEB ANALYSIS AND ADVERTISING PURPOSES

If you have given your consent in accordance with Article 6(1)(a) GDPR, we use the following cookies and other third-party technologies on our website. Once the purpose has ceased to exist and the use of the respective technology has ended, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future.

7.1 Use of Google services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) listed below. The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. No adequacy decision of the European Commission exists for the USA. Our cooperation is based on the Standard Contractual Clauses of the European Commission. If your IP address is collected by Google technologies, it will be shortened by activating IP anonymization before being stored on Google servers. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there.

Google Analytics
Google Maps
Google reCAPTCHA
Google Fonts
YouTube Video Plugin

Each of these services may collect data such as IP address, device information, browser data, visit time, location data or usage behavior, and process them for analytics, map display, spam prevention, font display or video embedding purposes.

7.2 Use of Facebook services

Facebook Analytics
Facebook Ads

Within the scope of these services, user activities may be statistically evaluated and used for advertising purposes.

7.3 Other web analysis and online marketing service providers

Pinterest Tag
Adobe Fonts
Vimeo Video Plugin

These services may also process IP address, browser data, device data, visit time and usage behavior.

SOCIAL MEDIA

8.1 Social media plugins of Facebook, Twitter, Instagram, Pinterest, WhatsApp

Social buttons of social networks are used on our website. These are only integrated into the page as HTML links, so that no connection to the servers of the respective provider is established when you access our website. Only when you click on one of the buttons will the website of the respective social network open in a new window of your browser.

8.2 Our online presence on Facebook, Twitter, Instagram, YouTube and Pinterest

If you have given your consent to the respective social media operator in accordance with Article 6(1)(a) GDPR, when visiting our online presences on the above-mentioned social media, your data may be automatically collected and stored for market research and advertising purposes. User profiles may be created from this data using pseudonyms. Cookies may be used for this purpose.

CONTACT OPTIONS AND YOUR RIGHTS

As a data subject, you have the following rights:

Access pursuant to Article 15 GDPR
Rectification pursuant to Article 16 GDPR
Erasure pursuant to Article 17 GDPR
Restriction of processing pursuant to Article 18 GDPR
Data portability pursuant to Article 20 GDPR
Lodging a complaint with a supervisory authority pursuant to Article 77 GDPR

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data, as well as withdrawal of consent or objection to a specific data use, please contact us directly using the contact details in our legal notice.

Right to object

If we process personal data as explained above to safeguard our legitimate interests, which outweigh your interests, you may object to this processing with effect for the future. If processing is carried out for direct marketing purposes, you may exercise this right at any time. If processing is carried out for other purposes, you only have a right to object on grounds relating to your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.

This privacy policy was created with the legal texts of Trusted Shops in cooperation with FÖHLISCH Rechtsanwälte.