Data Protecion
1) Information on the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about how we handle your personal data when you use our website. Personal data are all data with which you can be personally identified.
1.2 The person responsible for data processing on this website within the meaning of the Basic Data Protection Regulation (DSGVO) is LYNDEN GmbH, Jüdenstr.50, 10178 Berlin, Germany, Tel.: +49 30 240 475 92, E-Mail: support@mycanya.com. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
1.3 Contact details of the data protection officer PROLIANCE GmbH / www.datenschutzexperte.de Data protection officer Leopoldstr. 21 80802 Munich datenschutzbeauftragter@datenschutzexperte.de
1.4 For security reasons and to protect the transmission of personal data and other confidential contents (e.g. orders or inquiries to the responsible person), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
2) Data collection when visiting our website
If you use our website for informational purposes only, i.e. if you do not register or provide us with information in any other way, we only collect the data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of transmitted data in bytes
- Source/reference from which you accessed the site
- Used Browser
- Operating system used
- IP address used (if necessary: in anonymised form)
The processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
3) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit us (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 Para. 1 lit. f DSGVO to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Technically necessary cookies (e.g. shopping basket cookies) are stored on the basis of Art. 6 Para. 1 lit. f DSGVO. We have a legitimate interest in the storage of cookies for the technically error-free and optimised provision of our services. Other cookies (e.g. tracking and targeting cookies) are only stored with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. This consent can be revoked at any time for the future.
Under certain circumstances, we work together with advertising partners who help us to make our Internet offer more interesting for you. For this purpose, cookies from partner companies will also be stored on your hard drive when you visit our website (cookies from third parties). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for each browser under the following links:
Internet Explorer
Firefox
Chrome
Safari
Opera
Please note that the functionality of our website may be limited if cookies are not accepted.
4) Contact us
Personal data is collected when you contact us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO. If your contact is aimed at the conclusion of a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after the final processing of your request; this is the case if it can be concluded from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal obligations to retain data.
5) Data processing when opening a customer account and for contract processing
In accordance with Art. 6 Para. 1 lit. b DGSVO, personal data will continue to be collected and processed if you provide us with this information for the purpose of executing a contract or opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be carried out by sending a message to the above-mentioned address of the person responsible. We store and use the data you provide us with for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us, about which we will inform you accordingly below.
6) Comment function
Within the framework of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the name of the commentor you have chosen will be saved and published on the website. Furthermore, your IP address will be logged and saved. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content by posting a comment. We need your e-mail address in order to contact you in case a third party should complain about your published content as illegal. The legal basis for the storage of your data is article 6 paragraph 1 lit.b and f DSGVO. We reserve the right to delete comments if they are objected to as illegal by third parties.
7) Use of your data for direct advertising
Registration for our e-mail newsletter
If you register for our e-mail newsletter, we will send you regular information about our offers. Your e-mail address is the only mandatory information for the sending of the newsletter. The indication of further possible data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed that you agree to receive newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on a corresponding link.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. When you register for the newsletter, we save your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will be used exclusively for the purpose of advertising in the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned at the beginning. Once you have cancelled your subscription, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this declaration.
8) Data processing for order processing
8.1 In order to process your order, we work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery within the framework of the contract processing, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the assigned credit institute within the scope of the payment processing, as far as this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you about this below.
The legal basis for the transfer of data is Art. 6 para. 1 lit. b DSGVO.
8.2 Use of payment service providers (payment service providers)
- Paymorrow
If you choose the payment method "purchase on account" or "payment by instalments" via Paymorrow, you will be asked to provide your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process. In order to protect our justified interest in the determination of the solvency of our customers, these data are passed on by us in accordance with art. 6 exp. 1 lit. f DSGVO for the purpose of a credit assessment to paymorrow GmbH, Erzbergerstraße 117, 76133 Karlsruhe ("paymorrow"). Paymorrow examines on basis of the personal data indicated by you as well as further data (like e.g. shopping cart, invoice amount, order history, payment experiences) whether the payment possibility selected by you can be granted regarding payment and/or bad debt risks.
In addition to paymorrow's internal criteria in accordance with Art. 6 para. 1 lit. f DSGVO, identity and creditworthiness information from the following credit agencies can also be included in the decision within the scope of the application review:
- CRIF Bürgel GmbH, Gasstraße 18, D-22761 Hamburg,
Phone: +49 (0) 40 - 89 80 3 -- 0, Fax: -777
- Creditreform Boniversum GmbH, Hellersbergstr. 11, D-41460 Neuss,
Phone: +49 (0)2131-109501, Fax: -557
- CRIF GmbH, Dessauerstrasse 9, 80992 Munich,
Phone: +49 (0)721/ 255 11 0, Fax: - 22
The credit rating information may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. Your personal data will be transmitted to Schufa (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden) for the purpose of identity verification in accordance with Art. 6 para. 1 lit. f DSGVO. Schufa will then inform paymorrow of the degree of correspondence between the personal data stored with it and the data you have provided in percentages and, if applicable, a reference to an identification-based legitimacy check carried out by Schufa or another contractual partner. Paymorrow can recognize thus on the basis the conveyed agreement rates whether a person is stored under the address indicated by you in the data stock of the Schufa. Under the following Internet address you receive further information about the data security regulations of paymorrow
You can contradict this processing of your data at any time by a message to the person responsible for the data processing or to paymorrow. However paymorrow remains if necessary further entitled to process your personal data, if this is necessary for the payment completion according to contract.
- Paypal
If you pay via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), within the scope of the payment processing. The data will be passed on in accordance with Art. 6 para. 1 lit. b DSGVO and only to the extent necessary for the processing of payments.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. The result of the credit assessment with regard to the statistical probability of non-payment is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process your payment in accordance with the contract.
8.3 Transfer and use to transport and shipping service providers
- If the goods are delivered by the shipping service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we may pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a DSGVO for the purpose of delivery dates and changes, provided that you have given your express consent to our data protection declaration during the ordering process. In general, only the name and delivery address of the recipient will be passed on to DHL for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO. The name and delivery address of the recipient will only be passed on in the case of a completed order with necessary shipment of goods. This consent can be revoked at any time by the shipping service provider DHL and the company's data protection officer mentioned above.
- If the goods are delivered by the shipping service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we may pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a DSGVO for the purpose of delivery dates and changes, provided that you have given your express consent to our data protection declaration during the ordering process. In general, only the name and delivery address of the recipient will be passed on to DHL for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO. The name and delivery address of the recipient will only be passed on in the case of a completed order with necessary shipment of goods. This consent can be revoked at any time by the shipping service provider DHL and the above-mentioned data protection officer of the company.
9) Contacting you to remind you to leave a rating
- Our own rating reminder (no dispatch by a customer rating system)
We will use your e-mail address as a one-time reminder to submit a rating of your order for the rating system we use, provided that you have given us your express consent to do so during or after your order in accordance with Art. 6 Para. 1 lit. a DSGVO.
You can revoke your consent at any time by sending a message to the person responsible for data processing.
- Evaluation reminder by ausgezeichnet.org
If you have given us your express consent to do so during or after your order in accordance with Art. 6 Para. 1 lit. a DSGVO, we will transmit your e-mail address to the ausgezeichnet.org evaluation platform of AUBII GmbH, Alsterufer 34, 20354 Hamburg (www.ausgezeichnet.org), so that the latter can send you an evaluation reminder by e-mail.
You can withdraw your consent at any time by sending a message to the person responsible for data processing or to the rating platform.
- Rating reminder by Trusted Shops
Provided that you have given us your express consent to this during or after your order in accordance with Art. 6 Para. 1 lit. a DSGVO, we will transmit your e-mail address to the rating platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany, so that it can send you a rating reminder by e-mail.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to the rating platform.
10) Youtube
Use of YouTube videos
This website uses the YouTube embedding feature to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
This uses the enhanced privacy mode, which, according to the provider, does not initiate the storage of user information until the video(s) is played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behaviour. According to information from "YouTube", these are used, among other things, to collect video statistics, improve the user experience and prevent abusive behaviour. If you are logged in to Google, your information is associated directly with your account when you click on a video. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit.f DSGVO on the basis of Google's legitimate interest in the display of personalised advertising, market research and/or needs-based design of its website. You have a right of objection to the creation of these user profiles, whereby you must contact YouTube in order to exercise this right.
Irrespective of any playback of the embedded videos, each time you visit this website a connection to the Google "DoubleClick" network is established, which may trigger further data processing operations without our influence.
Google, based in the United States, is certified under the U.S. European Privacy Shield Agreement, which ensures compliance with the level of data protection applicable in the EU. Further information on data protection at "YouTube" can be found in the provider's privacy policy.
11) Web analysis services
11.1 Google (Universal) Analytics
- Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. Through the extension your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to website and internet use. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the currently available browser plugin.
As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you will have to click this link again)
Click here to disable Google Analytics
Google LLC, headquartered in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU.
More information on how Google Analytics handles user data can be found in the Google privacy policy.
12) Tools and others
12.1 Google Maps
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Maps is a web service for the display of interactive (land) maps to visually present geographical information. By using this service, our location will be displayed to you and any directions you may require will be made easier.
Already when calling up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit.f DSGVO on the basis of Google's legitimate interest in the display of personalised advertising, market research and/or needs-based design of its website. You have a right of objection to the creation of these user profiles, whereby you must contact YouTube in order to exercise this right.
Google, with headquarters in the USA, is responsible for the us European
Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU.
If you do not agree with the future transmission of your data to Google within the scope of using Google Maps, there is also the possibility of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus the map display on this website cannot be used in this case.
The terms of use of Google can be found here, the additional terms of use for Google Maps can be found here.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy").
12.2 Trusted Shops Trust Badge
To display our Trusted Shops seal of approval and to offer the Trusted Shops membership to buyers after an order, the Trusted Shops trust badge is integrated on this website.
This serves the protection of our in the context of a balancing of interests predominant legitimate interests in an optimal marketing of our offer, art. 6 exp. 1 lit. f DSGVO. The trust badge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the trust badge is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.
Other personal data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case the contractual agreement between you and Trusted Shops applies.
13) Rights of the user
13.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below:
- Right to information in accordance with Art. 15 DSGVO: You have in particular the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right of rectification, erasure, restriction of processing, opposition to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling and, where applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees that apply pursuant to Art. 46 DPA when your data is transferred to third countries;
- Right of rectification in accordance with Art. 16 DPA: You have the right to rectify any inaccurate data concerning you and/or to complete any incomplete data held by us without delay;
- Right to deletion in accordance with Art. 17 DSGVO: You have the right to request the deletion of your personal data if the conditions of Art. 17 para. 1 DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- Right to restrict processing in accordance with Art. 18 DPA: You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data, which you dispute, is checked; if you refuse to delete your data on the grounds of unlawful processing and instead request the restriction of the processing of your data; if you need your data to assert, exercise or defend legal claims, after we no longer need them after the purpose has been achieved; or if you have lodged an objection on the grounds of your particular situation, as long as it is not yet clear whether our legitimate reasons outweigh the objection;
- Right to be informed in accordance with Art. 19 DSGVO: If you have asserted the right of rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.
- Right to data transferability in accordance with Art. 20 DSGVO: You have the right to receive the personal data you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically feasible;
- Right to revoke consents granted pursuant to Art. 7 para. 3 DSGVO: You have the right to revoke at any time with effect for the future any consent to the processing of data once granted. In the event of revocation, we will delete the data concerned immediately, unless further processing cannot be based on a legal basis for processing without consent. Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation;
- Right of appeal under Art. 77 DSGVO: If you believe that the processing of personal data concerning you is in breach of the DPA, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, in which you work or in which the alleged breach occurred, without prejudice to any other administrative or judicial remedy.
13.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS DUE TO OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
14) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of the period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract and/or if we have no legitimate interest in further storage.
Social Media
I. Provider
1. Facebook
1.1 Responsible body
In the event that the data you have provided us with is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is, in addition to us or in our place, the person responsible for data processing within the meaning of the DSGVO. For this purpose, we have concluded an agreement with Facebook in accordance with Art. 26 DSGVO on joint responsibility for data processing (Controller Addendum). This agreement defines the data processing operations for which we or Facebook are responsible when you visit our Facebook fan page. You can view this agreement under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum. If you as a visitor to the site wish to exercise your rights (information, correction, deletion, restriction, data transferability, complaint to the supervisory authority, objection or revocation), you can contact both Facebook and us. You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/setti... or http://www.youronlinechoices.c... For further details, please see the Facebook privacy policy: https://www.facebook.com/about...
1.2 Facebook's privacy officer.
To contact the data protection officer of Facebook, you can use the online contact form provided by Facebook under the following link https://www.facebook.com/help/...540977946302970" class="redactor-autoparser-object">https://www.facebook.com/help/... use.
1.3 Data processing for statistical purposes using Page-Insights Facebook provides so-called Page-Insights for our Facebook fan page:
https://www.facebook.com/business/a/page/page-insights.
These are summarized data that provide information about how people interact with our site. Page Insights may be based on personally identifiable information collected in connection with a visit or interaction with our Site and in connection with content provided. Please note what personal information you share with us through Facebook. Your data may be processed for market research and advertising purposes, even if you are not logged in to Facebook or do not have a Facebook account. For example, user profiles can be created from the user behavior and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies, which are stored on your end device. Furthermore, user profiles may also store data that is independent of the devices used by the users; especially if the users are members of the respective platforms and are logged on to them. The legal basis of the processing is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the optimised presentation of our offer, the effective information and communication with customers and interested parties as well as the targeted placement of advertisements. Please note that we have no influence on the data collection and further processing by Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing deletion obligations, which evaluations and links to the data are carried out by Facebook and to whom the data is passed on by Facebook. If you want to avoid the processing of your personal data by Facebook, please contact us by other means.
2. Other social media providers
2.1 Responsible body If your personal data is processed by one of the providers listed below, this provider is responsible for data processing in the sense of the DSGVO. For the assertion of your data subject rights, we point out that these can be asserted most effectively with the respective providers. Only these providers have access to the data collected from you. Should you nevertheless require assistance, please do not hesitate to contact us at any time.
We have online presences on the social media platforms of the following providers:
- Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
- Instagram Inc, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland - YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
2.2 Data protection officer
You can find information on how to contact the data protection officers of other social media providers here:
- Twitter Inc.: https://twitter.ethicspointvp....
- Instagram Inc. https://www.facebook.com/help/... Privacy Officer
- YouTube please contact Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
II. General information on social media platforms by CANYA / LYNDEN GmbH.
1st responsible office
The person responsible for data processing within the meaning of the DSGVO is the following office, insofar as the data transmitted to us by you via one of the social media platforms is processed by ourselves:
LYNDEN Ltd.
Jüdenstrasse 50
10178 Berlin
Germany
Phone: +49 (0) 3056838065
e-mail: support@mycanya.com
2. our data protection officer
In the event of concerns regarding data processing that is carried out by us as the responsible party, you can reach our data protection officer at the following contact details: PROLIANCE GmbH / datenschutzexperte.de Data Protection Officer Leopoldstr. 21 80802 Munich E-mail: datenschutzbeauftragter@datenschutzexperte.de
3. general data processing on social media platforms
3.1 Data processing for market research and advertising
As a rule, personal data is processed on the company side for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. Usage profiles can be created using the collected data. These are used to place advertisements inside and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the user profiles regardless of the devices you use. This is regularly the case if you are a member of the respective platforms and are logged on to them.
3.2 Data processing when making contact
We ourselves collect personal data when you contact us, for example, via a contact form or through a messenger service such as Facebook Messenger. Which data is collected depends on the information you provide and the contact details you have provided or released. These are stored by us for the purpose of processing your inquiry and in case of follow-up questions. Under no circumstances will we pass the data on to third parties without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO and, if applicable, Art. 6 para. 1 lit. b DSGVO, if your request is aimed at the conclusion of a contract. Your data will be deleted after the final processing of your enquiry, provided that this does not conflict with any statutory storage obligations. We assume that the data will be processed conclusively if it can be concluded from the circumstances that the matter in question has been finally clarified.
3.3 Data processing for contract processing
If your contacting us via a social network or other platform aims at the conclusion of a contract for the delivery of goods or the provision of services with us, we process your data for the fulfilment of the contract or for the implementation of pre-contractual measures or for the provision of the requested services. The legal basis for the processing of your data in this case is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted if they are no longer required for the execution of the contract or if it is clear that the pre-contractual measures will not lead to a conclusion of contract corresponding to the purpose of the contact. Please note, however, that even after conclusion of the contract it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations.
3.4 Data processing based on consent
If you are asked by the respective providers of the platforms to give your consent to processing for a specific purpose, the legal basis for the processing is Art. 6 (1) lit. a., Art. 7 DSGVO. A granted consent can be revoked at any time with effect for the future.
III. Data transfer and Recipient
Please note that due to the use of the social media platforms, data processing may take place outside the EU and the European Economic Area, so that the European level of data protection cannot necessarily be guaranteed. The aforementioned social media providers based in the USA are certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. We have no influence on the processing and handling of your personal data by the respective providers. Nor do we have any information on this. For further information, please check the data protection declaration of the respective provider:
- Twitter Privacy Policy: https://twitter.com/de/privacy, Opt-out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/...
- Instagram Privacy Policy/Opt-out: http://instagram.com/about/leg...
- YouTube/Google privacy policy: https://policies.google.com/privacy?hl=de&gl=de, Opt-out: https://adssettings.google.com... , Privacy Shield: https://www.privacyshield.gov/...
IV. Your rights
In the following, you will find information on the rights of data subjects which the applicable data protection law grants you vis-à-vis the person responsible. You have the right to request information about your personal data processed by us; Art. 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details thereof. to request without delay the rectification of inaccurate or incomplete personal data held by us; Art. 16 DSGVO. to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; Art. 17 DSGVO. to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 DSGVO; Art. 18 DSGVO. to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party; Art. 20 DSGVO. to complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you may contact the supervisory authority of the federal state of our registered office as stated above or that of your usual place of residence or place of work for this purpose. to revoke any consent to the processing of data once granted at any time with effect for the future; Art. 7 para. 3 DSGVO. In the event of revocation, we will delete the data concerned immediately, unless further processing cannot be based on a legal basis for processing without consent. Revocation of consent does not affect the lawfulness of the processing that has taken place on the basis of the consent until revocation.
Right of objection
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right of objection without the requirement of special reasons.
If you would like to exercise your right of revocation or objection, simply send an e-mail to
support@mycanya.com
V. Storage period
The personal data collected by us will be deleted from our system if they are no longer required for the purposes specified at the time of collection or if you have exercised your right of revocation or objection. Legal retention periods remain unaffected. We have no influence on the storage period of your data, which is stored by social media providers for their own purposes. For details, please contact them directly.
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about how we handle your personal data when you use our website. Personal data are all data with which you can be personally identified.
1.2 The person responsible for data processing on this website within the meaning of the Basic Data Protection Regulation (DSGVO) is LYNDEN GmbH, Jüdenstr.50, 10178 Berlin, Germany, Tel.: +49 30 240 475 92, E-Mail: support@mycanya.com. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
1.3 Contact details of the data protection officer PROLIANCE GmbH / www.datenschutzexperte.de Data protection officer Leopoldstr. 21 80802 Munich datenschutzbeauftragter@datenschutzexperte.de
1.4 For security reasons and to protect the transmission of personal data and other confidential contents (e.g. orders or inquiries to the responsible person), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
2) Data collection when visiting our website
If you use our website for informational purposes only, i.e. if you do not register or provide us with information in any other way, we only collect the data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of transmitted data in bytes
- Source/reference from which you accessed the site
- Used Browser
- Operating system used
- IP address used (if necessary: in anonymised form)
The processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
3) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit us (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 Para. 1 lit. f DSGVO to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Technically necessary cookies (e.g. shopping basket cookies) are stored on the basis of Art. 6 Para. 1 lit. f DSGVO. We have a legitimate interest in the storage of cookies for the technically error-free and optimised provision of our services. Other cookies (e.g. tracking and targeting cookies) are only stored with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. This consent can be revoked at any time for the future.
Under certain circumstances, we work together with advertising partners who help us to make our Internet offer more interesting for you. For this purpose, cookies from partner companies will also be stored on your hard drive when you visit our website (cookies from third parties). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for each browser under the following links:
Internet Explorer
Firefox
Chrome
Safari
Opera
Please note that the functionality of our website may be limited if cookies are not accepted.
4) Contact us
Personal data is collected when you contact us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO. If your contact is aimed at the conclusion of a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after the final processing of your request; this is the case if it can be concluded from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal obligations to retain data.
5) Data processing when opening a customer account and for contract processing
In accordance with Art. 6 Para. 1 lit. b DGSVO, personal data will continue to be collected and processed if you provide us with this information for the purpose of executing a contract or opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be carried out by sending a message to the above-mentioned address of the person responsible. We store and use the data you provide us with for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us, about which we will inform you accordingly below.
6) Comment function
Within the framework of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the name of the commentor you have chosen will be saved and published on the website. Furthermore, your IP address will be logged and saved. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content by posting a comment. We need your e-mail address in order to contact you in case a third party should complain about your published content as illegal. The legal basis for the storage of your data is article 6 paragraph 1 lit.b and f DSGVO. We reserve the right to delete comments if they are objected to as illegal by third parties.
7) Use of your data for direct advertising
Registration for our e-mail newsletter
If you register for our e-mail newsletter, we will send you regular information about our offers. Your e-mail address is the only mandatory information for the sending of the newsletter. The indication of further possible data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed that you agree to receive newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on a corresponding link.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. When you register for the newsletter, we save your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will be used exclusively for the purpose of advertising in the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned at the beginning. Once you have cancelled your subscription, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this declaration.
8) Data processing for order processing
8.1 In order to process your order, we work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery within the framework of the contract processing, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the assigned credit institute within the scope of the payment processing, as far as this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you about this below.
The legal basis for the transfer of data is Art. 6 para. 1 lit. b DSGVO.
8.2 Use of payment service providers (payment service providers)
- Paymorrow
If you choose the payment method "purchase on account" or "payment by instalments" via Paymorrow, you will be asked to provide your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process. In order to protect our justified interest in the determination of the solvency of our customers, these data are passed on by us in accordance with art. 6 exp. 1 lit. f DSGVO for the purpose of a credit assessment to paymorrow GmbH, Erzbergerstraße 117, 76133 Karlsruhe ("paymorrow"). Paymorrow examines on basis of the personal data indicated by you as well as further data (like e.g. shopping cart, invoice amount, order history, payment experiences) whether the payment possibility selected by you can be granted regarding payment and/or bad debt risks.
In addition to paymorrow's internal criteria in accordance with Art. 6 para. 1 lit. f DSGVO, identity and creditworthiness information from the following credit agencies can also be included in the decision within the scope of the application review:
- CRIF Bürgel GmbH, Gasstraße 18, D-22761 Hamburg,
Phone: +49 (0) 40 - 89 80 3 -- 0, Fax: -777
- Creditreform Boniversum GmbH, Hellersbergstr. 11, D-41460 Neuss,
Phone: +49 (0)2131-109501, Fax: -557
- CRIF GmbH, Dessauerstrasse 9, 80992 Munich,
Phone: +49 (0)721/ 255 11 0, Fax: - 22
The credit rating information may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. Your personal data will be transmitted to Schufa (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden) for the purpose of identity verification in accordance with Art. 6 para. 1 lit. f DSGVO. Schufa will then inform paymorrow of the degree of correspondence between the personal data stored with it and the data you have provided in percentages and, if applicable, a reference to an identification-based legitimacy check carried out by Schufa or another contractual partner. Paymorrow can recognize thus on the basis the conveyed agreement rates whether a person is stored under the address indicated by you in the data stock of the Schufa. Under the following Internet address you receive further information about the data security regulations of paymorrow
You can contradict this processing of your data at any time by a message to the person responsible for the data processing or to paymorrow. However paymorrow remains if necessary further entitled to process your personal data, if this is necessary for the payment completion according to contract.
- Paypal
If you pay via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), within the scope of the payment processing. The data will be passed on in accordance with Art. 6 para. 1 lit. b DSGVO and only to the extent necessary for the processing of payments.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. The result of the credit assessment with regard to the statistical probability of non-payment is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process your payment in accordance with the contract.
8.3 Transfer and use to transport and shipping service providers
- If the goods are delivered by the shipping service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we may pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a DSGVO for the purpose of delivery dates and changes, provided that you have given your express consent to our data protection declaration during the ordering process. In general, only the name and delivery address of the recipient will be passed on to DHL for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO. The name and delivery address of the recipient will only be passed on in the case of a completed order with necessary shipment of goods. This consent can be revoked at any time by the shipping service provider DHL and the company's data protection officer mentioned above.
- If the goods are delivered by the shipping service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we may pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a DSGVO for the purpose of delivery dates and changes, provided that you have given your express consent to our data protection declaration during the ordering process. In general, only the name and delivery address of the recipient will be passed on to DHL for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO. The name and delivery address of the recipient will only be passed on in the case of a completed order with necessary shipment of goods. This consent can be revoked at any time by the shipping service provider DHL and the above-mentioned data protection officer of the company.
9) Contacting you to remind you to leave a rating
- Our own rating reminder (no dispatch by a customer rating system)
We will use your e-mail address as a one-time reminder to submit a rating of your order for the rating system we use, provided that you have given us your express consent to do so during or after your order in accordance with Art. 6 Para. 1 lit. a DSGVO.
You can revoke your consent at any time by sending a message to the person responsible for data processing.
- Evaluation reminder by ausgezeichnet.org
If you have given us your express consent to do so during or after your order in accordance with Art. 6 Para. 1 lit. a DSGVO, we will transmit your e-mail address to the ausgezeichnet.org evaluation platform of AUBII GmbH, Alsterufer 34, 20354 Hamburg (www.ausgezeichnet.org), so that the latter can send you an evaluation reminder by e-mail.
You can withdraw your consent at any time by sending a message to the person responsible for data processing or to the rating platform.
- Rating reminder by Trusted Shops
Provided that you have given us your express consent to this during or after your order in accordance with Art. 6 Para. 1 lit. a DSGVO, we will transmit your e-mail address to the rating platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany, so that it can send you a rating reminder by e-mail.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to the rating platform.
10) Youtube
Use of YouTube videos
This website uses the YouTube embedding feature to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
This uses the enhanced privacy mode, which, according to the provider, does not initiate the storage of user information until the video(s) is played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behaviour. According to information from "YouTube", these are used, among other things, to collect video statistics, improve the user experience and prevent abusive behaviour. If you are logged in to Google, your information is associated directly with your account when you click on a video. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit.f DSGVO on the basis of Google's legitimate interest in the display of personalised advertising, market research and/or needs-based design of its website. You have a right of objection to the creation of these user profiles, whereby you must contact YouTube in order to exercise this right.
Irrespective of any playback of the embedded videos, each time you visit this website a connection to the Google "DoubleClick" network is established, which may trigger further data processing operations without our influence.
Google, based in the United States, is certified under the U.S. European Privacy Shield Agreement, which ensures compliance with the level of data protection applicable in the EU. Further information on data protection at "YouTube" can be found in the provider's privacy policy.
11) Web analysis services
11.1 Google (Universal) Analytics
- Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. Through the extension your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to website and internet use. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the currently available browser plugin.
As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you will have to click this link again)
Click here to disable Google Analytics
Google LLC, headquartered in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU.
More information on how Google Analytics handles user data can be found in the Google privacy policy.
12) Tools and others
12.1 Google Maps
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Maps is a web service for the display of interactive (land) maps to visually present geographical information. By using this service, our location will be displayed to you and any directions you may require will be made easier.
Already when calling up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit.f DSGVO on the basis of Google's legitimate interest in the display of personalised advertising, market research and/or needs-based design of its website. You have a right of objection to the creation of these user profiles, whereby you must contact YouTube in order to exercise this right.
Google, with headquarters in the USA, is responsible for the us European
Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU.
If you do not agree with the future transmission of your data to Google within the scope of using Google Maps, there is also the possibility of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus the map display on this website cannot be used in this case.
The terms of use of Google can be found here, the additional terms of use for Google Maps can be found here.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy").
12.2 Trusted Shops Trust Badge
To display our Trusted Shops seal of approval and to offer the Trusted Shops membership to buyers after an order, the Trusted Shops trust badge is integrated on this website.
This serves the protection of our in the context of a balancing of interests predominant legitimate interests in an optimal marketing of our offer, art. 6 exp. 1 lit. f DSGVO. The trust badge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the trust badge is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.
Other personal data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case the contractual agreement between you and Trusted Shops applies.
13) Rights of the user
13.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below:
- Right to information in accordance with Art. 15 DSGVO: You have in particular the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right of rectification, erasure, restriction of processing, opposition to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling and, where applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees that apply pursuant to Art. 46 DPA when your data is transferred to third countries;
- Right of rectification in accordance with Art. 16 DPA: You have the right to rectify any inaccurate data concerning you and/or to complete any incomplete data held by us without delay;
- Right to deletion in accordance with Art. 17 DSGVO: You have the right to request the deletion of your personal data if the conditions of Art. 17 para. 1 DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- Right to restrict processing in accordance with Art. 18 DPA: You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data, which you dispute, is checked; if you refuse to delete your data on the grounds of unlawful processing and instead request the restriction of the processing of your data; if you need your data to assert, exercise or defend legal claims, after we no longer need them after the purpose has been achieved; or if you have lodged an objection on the grounds of your particular situation, as long as it is not yet clear whether our legitimate reasons outweigh the objection;
- Right to be informed in accordance with Art. 19 DSGVO: If you have asserted the right of rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.
- Right to data transferability in accordance with Art. 20 DSGVO: You have the right to receive the personal data you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically feasible;
- Right to revoke consents granted pursuant to Art. 7 para. 3 DSGVO: You have the right to revoke at any time with effect for the future any consent to the processing of data once granted. In the event of revocation, we will delete the data concerned immediately, unless further processing cannot be based on a legal basis for processing without consent. Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation;
- Right of appeal under Art. 77 DSGVO: If you believe that the processing of personal data concerning you is in breach of the DPA, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, in which you work or in which the alleged breach occurred, without prejudice to any other administrative or judicial remedy.
13.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS DUE TO OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
14) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of the period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract and/or if we have no legitimate interest in further storage.
Social Media
I. Provider
1. Facebook
1.1 Responsible body
In the event that the data you have provided us with is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is, in addition to us or in our place, the person responsible for data processing within the meaning of the DSGVO. For this purpose, we have concluded an agreement with Facebook in accordance with Art. 26 DSGVO on joint responsibility for data processing (Controller Addendum). This agreement defines the data processing operations for which we or Facebook are responsible when you visit our Facebook fan page. You can view this agreement under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum. If you as a visitor to the site wish to exercise your rights (information, correction, deletion, restriction, data transferability, complaint to the supervisory authority, objection or revocation), you can contact both Facebook and us. You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/setti... or http://www.youronlinechoices.c... For further details, please see the Facebook privacy policy: https://www.facebook.com/about...
1.2 Facebook's privacy officer.
To contact the data protection officer of Facebook, you can use the online contact form provided by Facebook under the following link https://www.facebook.com/help/...540977946302970" class="redactor-autoparser-object">https://www.facebook.com/help/... use.
1.3 Data processing for statistical purposes using Page-Insights Facebook provides so-called Page-Insights for our Facebook fan page:
https://www.facebook.com/business/a/page/page-insights.
These are summarized data that provide information about how people interact with our site. Page Insights may be based on personally identifiable information collected in connection with a visit or interaction with our Site and in connection with content provided. Please note what personal information you share with us through Facebook. Your data may be processed for market research and advertising purposes, even if you are not logged in to Facebook or do not have a Facebook account. For example, user profiles can be created from the user behavior and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies, which are stored on your end device. Furthermore, user profiles may also store data that is independent of the devices used by the users; especially if the users are members of the respective platforms and are logged on to them. The legal basis of the processing is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the optimised presentation of our offer, the effective information and communication with customers and interested parties as well as the targeted placement of advertisements. Please note that we have no influence on the data collection and further processing by Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing deletion obligations, which evaluations and links to the data are carried out by Facebook and to whom the data is passed on by Facebook. If you want to avoid the processing of your personal data by Facebook, please contact us by other means.
2. Other social media providers
2.1 Responsible body If your personal data is processed by one of the providers listed below, this provider is responsible for data processing in the sense of the DSGVO. For the assertion of your data subject rights, we point out that these can be asserted most effectively with the respective providers. Only these providers have access to the data collected from you. Should you nevertheless require assistance, please do not hesitate to contact us at any time.
We have online presences on the social media platforms of the following providers:
- Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
- Instagram Inc, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland - YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
2.2 Data protection officer
You can find information on how to contact the data protection officers of other social media providers here:
- Twitter Inc.: https://twitter.ethicspointvp....
- Instagram Inc. https://www.facebook.com/help/... Privacy Officer
- YouTube please contact Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
II. General information on social media platforms by CANYA / LYNDEN GmbH.
1st responsible office
The person responsible for data processing within the meaning of the DSGVO is the following office, insofar as the data transmitted to us by you via one of the social media platforms is processed by ourselves:
LYNDEN Ltd.
Jüdenstrasse 50
10178 Berlin
Germany
Phone: +49 (0) 3056838065
e-mail: support@mycanya.com
2. our data protection officer
In the event of concerns regarding data processing that is carried out by us as the responsible party, you can reach our data protection officer at the following contact details: PROLIANCE GmbH / datenschutzexperte.de Data Protection Officer Leopoldstr. 21 80802 Munich E-mail: datenschutzbeauftragter@datenschutzexperte.de
3. general data processing on social media platforms
3.1 Data processing for market research and advertising
As a rule, personal data is processed on the company side for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. Usage profiles can be created using the collected data. These are used to place advertisements inside and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the user profiles regardless of the devices you use. This is regularly the case if you are a member of the respective platforms and are logged on to them.
3.2 Data processing when making contact
We ourselves collect personal data when you contact us, for example, via a contact form or through a messenger service such as Facebook Messenger. Which data is collected depends on the information you provide and the contact details you have provided or released. These are stored by us for the purpose of processing your inquiry and in case of follow-up questions. Under no circumstances will we pass the data on to third parties without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO and, if applicable, Art. 6 para. 1 lit. b DSGVO, if your request is aimed at the conclusion of a contract. Your data will be deleted after the final processing of your enquiry, provided that this does not conflict with any statutory storage obligations. We assume that the data will be processed conclusively if it can be concluded from the circumstances that the matter in question has been finally clarified.
3.3 Data processing for contract processing
If your contacting us via a social network or other platform aims at the conclusion of a contract for the delivery of goods or the provision of services with us, we process your data for the fulfilment of the contract or for the implementation of pre-contractual measures or for the provision of the requested services. The legal basis for the processing of your data in this case is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted if they are no longer required for the execution of the contract or if it is clear that the pre-contractual measures will not lead to a conclusion of contract corresponding to the purpose of the contact. Please note, however, that even after conclusion of the contract it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations.
3.4 Data processing based on consent
If you are asked by the respective providers of the platforms to give your consent to processing for a specific purpose, the legal basis for the processing is Art. 6 (1) lit. a., Art. 7 DSGVO. A granted consent can be revoked at any time with effect for the future.
III. Data transfer and Recipient
Please note that due to the use of the social media platforms, data processing may take place outside the EU and the European Economic Area, so that the European level of data protection cannot necessarily be guaranteed. The aforementioned social media providers based in the USA are certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. We have no influence on the processing and handling of your personal data by the respective providers. Nor do we have any information on this. For further information, please check the data protection declaration of the respective provider:
- Twitter Privacy Policy: https://twitter.com/de/privacy, Opt-out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/...
- Instagram Privacy Policy/Opt-out: http://instagram.com/about/leg...
- YouTube/Google privacy policy: https://policies.google.com/privacy?hl=de&gl=de, Opt-out: https://adssettings.google.com... , Privacy Shield: https://www.privacyshield.gov/...
IV. Your rights
In the following, you will find information on the rights of data subjects which the applicable data protection law grants you vis-à-vis the person responsible. You have the right to request information about your personal data processed by us; Art. 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details thereof. to request without delay the rectification of inaccurate or incomplete personal data held by us; Art. 16 DSGVO. to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; Art. 17 DSGVO. to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 DSGVO; Art. 18 DSGVO. to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party; Art. 20 DSGVO. to complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you may contact the supervisory authority of the federal state of our registered office as stated above or that of your usual place of residence or place of work for this purpose. to revoke any consent to the processing of data once granted at any time with effect for the future; Art. 7 para. 3 DSGVO. In the event of revocation, we will delete the data concerned immediately, unless further processing cannot be based on a legal basis for processing without consent. Revocation of consent does not affect the lawfulness of the processing that has taken place on the basis of the consent until revocation.
Right of objection
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right of objection without the requirement of special reasons.
If you would like to exercise your right of revocation or objection, simply send an e-mail to
support@mycanya.com
V. Storage period
The personal data collected by us will be deleted from our system if they are no longer required for the purposes specified at the time of collection or if you have exercised your right of revocation or objection. Legal retention periods remain unaffected. We have no influence on the storage period of your data, which is stored by social media providers for their own purposes. For details, please contact them directly.