Privacy Notice

1. Miscellanous

Responsible agency: Schwaneberger Verlag GmbH, Industriestr. 1, 82110 Germering/Germany, Telephone: + 49 (0) 89 323 93-02, Telefax: + 49 (0) 89 323 93 248, E-mail: info@michel.de.

Data protection officer: Dr. Sebastian Kraska, IITR Datenschutz GmbH, Marienplatz 2, 80331 München, Telephone: +49 89 189 173 60, E-mail: email@iitr.de.

You may view the contents of this website, which are free of charge, without providing any personal data. Please, however, please note the information about cookies, Google Analytics and Facebook plug-ins.

You only need to register if you want to use the online services MICHEL Online and MICHELapp.

Please be advised that there may be security holes whenever data is transferred over the internet (such as any communication by e-mail). It is impossible to provide complete protection of data from access by third parties.

Our shop uses encrypted communication by HTTPS. Any data exchanged between your browser and our server, i.e. your order, payment data, etc., are therefore protected from access by third parties.

 

2. Visiting our website

2.1 Cookies

This website uses cookies. A cookie is a text data created by the browser that will be stored temporarily or permanently on your personal computer and that is fed with certain information our website can read again.

a) Session cookies

Purpose of the processing of session cookies: We use so-called session cookies, i.e. a cookie that is created only for the duration of one browser session and is automatically deleted when the browser is closed. This cookie comes with a randomly generated ID (pseudonym) that cannot be traced back to any certain individual. The information stored in such cookies is not linked to any personal data by us. We use cookies for the safeguarding of justified interests. These concern the analysis of the use of our website so as to make it more user-friendly.

Legal basis of the processing of session cookies: on Art. 6, Para. 1, Letter f, Basic Privacy Act.

b) Permanent cookies

Purpose of the processing of permanent cookies: A permanent cookie will remain stored on your personal computer even after your browser has been closed until it is deleted. We use these cookies to provide the functions as listed and to make the website more user-friendly.

  • We place a permanent cookie when you select a product in our online shop and add same to the shopping cart. This way the contents of your shopping cart are saved if you close the browser, and the selected products will still be in your shopping cart on your next visit of our website.
  • We place a permanent cookie if you select the function “Anmeldedaten merken“ (remember log-in data) when logging into your user account. Your user name and your password are stored in the cookie, and you do not have to enter them again on your next visit of our website.

Legal basis of the processing of permanent cookies: Art. 6, Para. 1, Letter f, Basic Privacy Act.

c) Prevention of the use of cookies

If you want to prevent the use of cookies, you have the option to completely deactivate cookies in your browser or to block certain cookies. You may also delete any stored cookies at any time. Alternatively, you may prevent that cookies are stored on your personal computer by activating the appropriate setting of your browser software. Please note that in this case you won’t be able to use all functions of this website.

2.2 Services provided by Google

2.2.1 Google Analytics

Subject matter of data processing: If you have given your consent, Google Analytics – a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (”Google“), will be activated on this website. Google Analytics uses cookies (see Clause 4.). Cookies make it possible to analyse your use of the website. The information concerning your use of the website that is created by these cookies is generally transmitted to a Google server in the U.S.A. and stored there. Prior to the transmission, the IP address is shortened, making it impossible to trace it back to a specific internet user.

Purpose of data processing: Google will use said information on our behalf to evaluate your use of our website, assemble reports about website activities and provide additional services regarding the use of our website. Google will not link the data compiled in the cookie to any other data compiled by Google.

Duration of data storage: Any data sent by us and linked to cookies will be automatically deleted after 14 months. The deletion of data that has already been stored for that duration will occur automatically once per month.

Legal basis of processing: Article 6, Clause 1, Letter a, General Data Protection Regulation. We obtain the consent from users by informing them about the use of cookies.

2.2.2 GoogleAds

Subject matter of data processing: If you have given your consent, ”Google Ads“ (formerly Google AdWords), a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google“), will be activated on this website.

Purpose of data processing: Google Ads enables us to promote our attractive products by advertising them on external websites. This allows us to analyse how successful specific means of advertising are.

Legal basis of processing: Article 6, Clause 1, Letter a, General Data Protection Regulation. We obtain the consent from users by informing them about the use of cookies.


2.2.3 Additional information about the services provided by Google

You will find additional information about how Google uses data, any options regarding the setting and objections as well as data protection on the following Google websites:

Privacy statement: https://policies.google.com/privacy?hl=de&gl=de
Google website statistics: https://services.google.com/sitestats/de.html

You may prevent the collection of the data regarding your use of our website (including your IP address) that is compiled by the cookie as well as the processing of this data by Google by downloading and installing the browser plug-in provided in the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative option you may also prevent the storage of cookies by adjusting your browser software accordingly. Please note that this will reduce the website functions you can use.

2.3 Facebook Pixel

Subject matter of data processing: If you have given your consent, ”Facebook Pixel“, a service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (referred to as ”Facebook“ in the following context) will be activated on our website. Facebook Pixel enables Facebook to present our adverts on Facebook, so-called “Facebook Ads“, only to Facebook users who already visited our website, in particularly those who have shown an interest in our online products or specific subjects or products.

Purpose of data processing: We use Facebook Pixel for purposes of marketing and optimization, particularly to present adverts on Facebook that are relevant to you and that may interest you, thus optimizing our offers, making it more interesting for you as a user, and avoiding any annoying adverts. Facebook Pixel makes it possible to check if a user was transferred to our website after having clicked on our Facebook ads. Facebook Pixel also uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your computer. When you are logged into Facebook with your Facebook account, your visit to our website is recorded in your user account. The compiled data is anonymous for us, providing us with no information about the user’s identity. However, this data compiled by Facebook may be interlinked with your Facebook account. We have no control of the extent and any other use of data compiled by Facebook using Facebook Pixel. To our knowledge Facebook is being informed when you have opened the pertinent section of our website or clicked on one of our adverts.  If you have a Facebook account and are logged in, Facebook can collate your visit to your Facebook account. Even if you are not registered with Facebook, respectively not logged in, it cannot be excluded that Facebook finds out your IP address and possibly other identifying features and stores same.

Legal basis of processing: Article 6, Clause 1, Letter a, General Data Protection Regulation. We obtain the consent of users by informing them about the use of cookies.

Prevention of data processing: You may revoke your consent to the compilation of your data by Facebook Pixel as described above as well as the use of your data for the presentation of Facebook adverts any time you wish. You may adjust settings in regards to which types of adverts will be presented to you on Facebook on the following Facebook website: https://www.facebook.com/settings?tab=ads. Be advised that this setting will be deleted when you delete your cookies. Furthermore you may also deactivate cookies that are employed for purposes of advertisement and measuring the scope on the following websites: http://optout.networkadvertising.org/
http://www.aboutads.info/choices
http://www.youronlinechoices.com/uk/your-ad-choices/

Additional information about Facebook Pixel: You will find additional information provided by Facebook regarding data protection on the following Facebook website: https://www.facebook.com/about/privacy. You will find information about Facebook Pixel on the following Facebook website: https://www.facebook.com/business/help/651294705016616

2.4 Integration of YouTube

We have included YouTube videos in our online offers; these are stored on the YouTube video platform and can be viewed directly from our website by an installed YouTube player. The YouTube provider is Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google”). All videos have been installed in the “extended data protection modus“, i.e. no data of you as a visitor of our website will be transmitted if you do not view the videos. Data will only be transmitted if you activate the videos. This transmission of data is not under our control.

When you visit a page with an activated YouTube player, Google will be provided with the information that you have opened the pertinent subpage of our website and will process your IP address, irrespective of the fact whether you have logged into Google or not or whether you have a Google account or not. If you are logged into Google, your data will be linked directly to your account. If you do not wish the linking of your data to your account, you must log out of your Google account before you activate the YouTube player. Google will store your data in the form of a user profile.

You may consult the privacy policy for additional information about the purpose and extent of the compilation and processing of your data by YouTube. It also provides additional information about your rights and setting options in order to protect your privacy: https://www.google.de/intl/de/policies/privacy.


3. Processing of personal data provided by you

We process personal data you provide us with for the purpose of answering requests and processing agreements about online services provided by us, in particular the rendering of contractual services and invoicing.

3.1 Newsletter

Purpose of data processing: With your consent, which you give us when registering for our newsletter, we will process your data for the purpose of sending you the newsletter. Providing us with your e-mail address is mandatory since it is necessary, while your first name and surname are not mandatory.

Furthermore we will conduct success monitoring based on the consent you gave us when registering for the newsletter. We record any instant – including the time/date – when a user opens an issue of our newsletter or clicks on a link contained in the newsletter so as to open specific contents.

Legal basis of processing: Article 6, Clause 1, Letter a, General Data Protection Regulation (consent).

Revocability: You may revoke your consent any time you wish. In that case we will no longer process your e-mail address in order to send you our newsletters and will no longer record any data when you open the newsletter and click on any links. You may cancel your subscription to our newsletter via a link in the newsletters, in your profile or by e-mail to marketing@michel.de.

3.2 Requests

Purpose of the processing of your data: If you contact us by e-mail or via a contact form, we will process the personal data you indicate in your request, including the contents of your request. We process this data so we can process your request.

Legal basis of the processing of your data: Art. 6, Para. 1, Letter b, Basic Privacy Act (pre-contractual steps).

3.3 Orders

Purpose of the processing of your data: If you order items in the shop or by other means, we will record the personal data you indicate in your order, including the contents of your order. We will use this data so we can perform the contract.

Legal basis of the processing of your data: Art. 6, Para. 1, Letter b, Basic Privacy Act (contractual performance).

3.4 Safeguarding of justified interests

Purpose of the processing of your data: Within the range of legal provisions, we are entitled to use your personal data to safeguard any justified interests. Our justified interests are: assertion of claims, customer support and direct marketing.

Legal basis of the processing of your data: Art. 6, Para. 1, Letter f, Basic Privacy Act (safeguarding of justified interests).

The right to object concerning direct marketing: In accordance with Art. 21, Para. 2, Basic Privacy Act, you may object to the processing of your data for the purpose of direct marketing any time. In that case the processing of your data will be restricted to the other purposes for which it is necessary and will not be processed for the purpose of direct marketing.


4. Processing by a third party

We only transmit personal data to a third party if this is necessary for the purpose of contract processing or billing, if we are legally required to do so or if you have given your explicit consent to the transmission of your data. Furthermore we use service providers that process the data at our request.

4.1 Contractual performance

Within the range of performance of contracts concluded through the shop, personal data will be processed by the following service providers to the extent that this is necessary.

Legal basis of the processing of your data: Art. 6, Para. 1, Letter b, Basic Privacy Act (contractual performance).

 

Service provider

Address

Purpose

PayPal (Europe) S.à.r.l. & Cie, S.C.A. Société en Commandite par Actions

5th Floor 22-24 Boulevard Royal L-2449, Luxembourg B 118 349

Payment

Computop Wirtschaftsinformatik GmbH

Schwarzenbergstr. 4
96050 Bamberg

Payment

SAFE Schwäbische Albumfabrik GmbH & Co. KG

Ermsstrasse 60, 72658 Bempflingen

Processing of orders of SAFE supply products
Müller - Die lila Logistik Fulfillment Solutions GmbH & Co. KG

Am Buchberg 8
74572 Blaufelden

Merchandise management, supplier, customer database

4.2 Other service providers

We furthermore use the following service providers that also have access to personal data within the range of their actitivies for the fulfilment of the listed purposes:

Service Provider

Address

Purpose

Crejuris Inkasso GmbH

Allgäuer Str. 7a
24146 Kiel

Collection agency

Hotline-Service.de GmbH

Schlossgasse 20
07743 Jena

IT support of customers; access to data for that purpose

1 & 1 Internet SE

Elgendorfer Str. 57
56410 Montabaur

Webhosting

Rocket Science Group

675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308

MailChimp newsletter tool, administration of dispatch lists

Gerber Media Service

Industriestr. 1
82110 Germering

IT services for website,
online shop & software

These service providers process any personal data only at our request and only according to our specifications.

Legal basis of the processing of your data: Art. 6, Para. 1, Letter f, Basic Privacy Act (safeguarding of justified interests).

The domicile of Rocket Science Group is in the U.S.A. The U.S.A. does not provide adequate data protection standards in accordance with Article 45, General Data Protection Regulation; we therefore apply the standard data protection clauses issued by the E.U. commission as an appropriate guaranty in accordance with Article 46, General Data Protection Regulation, which can be viewed here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de.

4.3 The fulfillment of any legal obligation

Purpose of the processing of your data: Apart from that, we only transmit any personal data to any third party if we are legally obliged to do so, such as to law enforcement agencies.

Legal basis of the processing in this case: Art. 6, Para. 1, Letter c, Basic Privacy Act.


5. User account

Purpose of the processing of your data: The following master files, which are required for the registration, will be stored in your user account: Log-in data (e-mail address, which serves as your user name, and password), e-mail address, name and billing address. In addition, the information you enter when using the administrative function, such as lists made by you. You may change or delete that information at any time. We process this data to be able to allocate orders to a customer and avoid having to enter the data again for additional orders.

Legal basis of the processing of your data: Art. 6, Para. 1, Letter b, Basic Privacy Act (contractual performance).

Duration of data storage: After the contract has been terminated, your user account will be deactivated and all data stored in it will be deleted.


6. Duration of data storage  

We will delete your data when it is no longer needed after a request has been processed, respectively the contract has been terminated. That excludes data we are not authorized to delete due to legal requirements (such as documentation that must be saved according to tax law and commercial law) and data we require for the safeguarding of justified interests, particularly for the assertion of claims or for direct marketing.


7. Your rights

  • You have the following rights, provided the pertinent legal preconditions apply:
  • You are entitled to request that any stored data relating to you personally be disclosed to you (Art. 15, Basic Privacy Act).
  • You are entitled to request that any incorrect data be corrected (Art. 16, Basic Privacy Act).
  • You are entitled to request that any data no longer required be deleted (Art. 17) or that the processing of such data be restricted (Art. 18, Basic Privacy Act). Insofar as we are required by law to save such data, such as for business correspondence according to commercial law and tax law or in the case of any other legal exception, data will not be deleted; instead its processing will merely be restricted.
  • You are entitled to object to the processing of your data for purposes of direct marketing and you may also object to any other kind of processing of your data for special reasons (Art. 21, Basic Privacy Act).
  • You are entitled to request data portability (Art. 20, Basic Privacy Act), i.e. to request that the data you provided to us be made available in a structured, common and machine-readable format and to transmit said data to another person responsible without being impeded by us;  if applicable, you may also be entitled to request that we directly transmit said data to another person responsible insofar as this is technically feasible.
  • Please contact the address listed under No. 1 for the enforcement of your rights.

Right to object: You may object to the processing of your data for the purpose of direct advertising and also to the processing of your data for the purpose of safeguarding legitimate interests for reasons that ensue from a particular situation you may be in (Article 21, General Data Protection Regulation) at any time.

To assert your rights, please contact the address listed in Sub-clause 1.

If you are of the opinion that the processing of your data violates the data protection laws, you may file a complaint with a supervisory authority (Article 77, General Data Protection Regulation). Our locally competent supervisory authority is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27 (Castle), 91522 Ansbach, Telephone: +49 (0) 981 53 1300, Telefax: +49 (0) 981 53 98 1300, E-mail: poststelle@lda.bayern.de.