Your data protection is our concern
Data Privacy Statement as well as Information for the Data Subjects in accordance with Articles 13 and 14 of the EU General Data Protection Regulation
(15. December 2021)
1. Scope of application and general information on data processing
1.1 The following Data Privacy Statement applies to use of the website marvelis.com along with related subsites and to services and offers provided thereon. This website is offered by MARVELIS KG, Freiberger Straße 26, 74379 Ingersheim, mail@marvelis.com in its capacity as controller within the meaning of Art. 4 EU General Data Protection Regulation ("GDPR").
1.2 You can contact our Data Protection Officer by email at datenschutz@marvelis.com or by writing to our postal address, adding the words: "The Data Protection Officer".
1.3 The protection of your personal data is important to us, above all with regard to safeguarding your right of privacy in connection with the processing and use of this information. Personal data are processed in accordance with the provisions of the GDPR.
2. Duration of storage
Your data will be used only as long as necessary for the existing customer relationship, unless you have given us your consent, or we have a legitimate interest in further processing. In these cases, we shall process your data until you revoke your consent or object to our legitimate interests. Regardless of the foregoing, we shall be obliged under provisions of commercial and fiscal law to store your address details, payment details and order details for a period of ten years.
3. Your rights
3.1 You have the following rights in relation to us regarding the personal data concerning you:
– right of access to your personal data,
– right to rectification or erasure,
– right to restriction of processing,
– right to object to processing,
– right to data portability,
Please send your written enquiry to MARVELIS KG, with the subject being: Data Privacy, Freiberger Straße 26, 74379 Ingersheim, or to the email address: datenschutz@marvelis.com.
3.2 You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
4. Automated collection and processing of data by the browser
4.1 As with every website, our server automatically collects the following information and temporarily stores it in the server log files transmitted by the browser, unless you have disabled this. If you wish to view our website, we shall collect the following data that we technically need for displaying our website to you and for ensuring its stability and security (the legal basis being Art. 6 (1) f) GDPR):
- the IP address of the computer requesting access,
- the client's file request,
- the http reply code,
- the website from which you are visiting us (referrer URL),
- the time of the server request,
- the browser type and version, - the requesting computer's operating system used.
No person-related evaluation of the server log files takes place. It is not possible for the provider to associate these data with certain persons at any point in time. Nor are these data combined with other data sources.
4.2 This website uses Google Analytics, a web analysis service from Google. Google Analytics uses so-called "cookies", text files that are stored on your computer and enable analysis of your use of the website. Generally, the information generated by such cookie regarding your use of this website will be transferred to a Google server in the USA and be stored there. If IP anonymisation is activated on this website, your IP address will, however, be truncated beforehand by Google within the Member States of the European Union or within other contracting states covered by the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports on the website activities and provide the website operator with further services relating to use of the website and the Internet. The IP address transmitted by your browser within Google Analytics will not be combined with any other Google data. You can prevent the storage of cookies by setting your browser software accordingly. Please note, however, that you may then possibly be unable to fully use all features of this website.
Moreover, you can prevent Google from recording the data generated by the cookie relating to your use of the website (including your IP address), and prevent Google from processing these data, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
In light of the discussion about the use of analysis tools with full IP addresses, we would like to point out that this website uses Google Analytics with the extension "_anonymizeIp()", and that IP addresses are therefore further processed only in truncated form so as to rule out a direct connection to any specific individual.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our services offered and make them more interesting for you as a user. For the exceptional cases where personal data are transferred to the USA, Google has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1), sentence 1, (f) GDPR.
Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, data privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html as well as the data privacy statement: http://www.google.de/intl/de/policies/privacy.
4.4 Our website uses cookies / advertising IDs for advertising purposes. This enables us to show to visitors interested in our products our advertising on partner websites, on apps and in emails. Retargeting technologies use cookies or advertising IDs and show advertising on the basis of your previous browsing behaviour. To wholly opt out of this interest-based advertising, please visit the following websites: http://www.networkadvertising.org/choices/ http://www.youronlinechoices.com
5. Collection and processing of data communicated voluntarily
5.1 General contact
Where you communicate personal data (surname, first name, email address, postal address) to us either by email or via our website, this generally takes place on a voluntary basis. These data will be used for handling the contractual relationship, for processing your enquiries or orders (the legal basis being Art. 6 (1) b) GDPR) and for our own market or opinion research and for our own advertising by post (the legal basis being Art. 6 (1) f) GDPR). The data will not be used beyond this. In particular, the data will not be passed on to third parties for the purposes of marketing, market research or opinion research.
5.2 MARVELIS CLUB
5.2.1 Where you have registered for the MARVELIS CLUB, we shall use your data in accordance with the following consent (Art. 6 (1) a) GDPR):
I agree that the data I have provided may be collected, stored, processed and used by MARVELIS (MARVELIS Stores KG, MARVELIS KG) for advertising, information and market research purposes. For carrying out certain services, my data will be passed on to commissioned companies evident from MARVELIS' Data Privacy Statement. The Data Privacy Statement is displayed in printed form in the store and can also be viewed at www.marvelis.com. Beyond the foregoing, my data will not be passed on to third parties.
By marking these fields with a cross (customer registration card) or filling in these fields (website), I agree to be informed by post / email / telephone / SMS about products and services from MARVELIS.
I have given the above consents voluntarily. I may revoke these consents at any time, also partially, with effect for the future. I can send such revocation to: postal address: MARVELIS Stores KG, with the reference being: Data Privacy, Höpfigheimer Straße 19, 74321 Bietigheim-Bissingen, Germany, or by email to: datenschutz@marvelis.com.
5.2.2 We point out in the context of MARVELIS CLUB that, when sending the newsletter, we shall evaluate your user behaviour on the basis of your consent (the legal basis being Art. 6 (1), sentence 1, a) GDPR). For this evaluation, the emails sent will contain so-called web beacons or tracking pixels; these are one-pixel image files stored on our website. For the evaluations, we shall link to your email address the data referred to in subsection 4.1 as well as the web beacons. With the data gained in this way, we shall create a user profile in order to tailor the newsletter to your individual interests. This will allow us to record when you read our newsletter and what links you click on in the newsletter and to deduce your personal interests from this. We shall link these data to your customer data. You can object to this tracking at any time for the future by sending your objection to datenschutz@marvelis.com.
For sending emails, we use the customer relationship management module "Salesforce Marketing Cloud" from Salesforce.com Inc., The Landmark@One Market Street, Suite 300, San Francisco, California, CA 94105, USA. Salesforce Marketing Cloud is an administrative service for user databases. The data are processed in the USA. The appropriate safeguards for data transfer to a third country are provided by mandatory internal data protection regulations and the standard data protection clauses; further information can be found at www.salesforce.com. The legal basis for use of the Salesforce Marketing Cloud is Art. 6 (1), sentence 1, f) GDPR. Further information on the Salesforce Marketing Cloud and on the data processed can be found at www.salesforce.com/privacy/.
5.2.3 We use the so-called double opt-in procedure for registration for our newsletter. This means that, after you have registered, we shall send you an email to the email address given, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, the information you provided will be blocked and be automatically erased after one month. Moreover, we shall store your respective IP addresses used and the times of registration and confirmation. The purpose of the procedure is to enable your registration to be proven and, where applicable, any possible misuse of your personal data to be cleared up.
6. Passing-on of personal data to third parties
As a general rule, we shall not pass on to third parties any personal data that you communicate to us. Such data will be passed on only
- within the scope of consent granted by you,
- to commissioned subcontractors in the course of the processing of your enquiries or orders or in the course of use of our services; these subcontractors will only receive the data necessary for carrying out such order and will use these data only for the specific purpose intended;
- to service providers in the course of commissioned data processing under Art. 28 GDPR, or
- to entitled entities in the course of the performance of legal obligations.
7. Cookies
The website uses its own cookies in order to make the website more user-friendly. Cookies are data sets sent by the web server to the user's browser and stored there for subsequent access. In particular, the cookies serve to recognise the Internet browser again. Cookies are used for session control and for statistical evaluation. These cookies do not contain any personal data of any kind. If you voluntarily opt for automatic log-in on the website, your log-in details (email address and password) will be stored on your computer in an additional cookie. You can set your browser in such a way that no cookies are installed on the hard drive, or cookies already installed are deleted again. To do so, please follow the instructions in your browser's Help feature regarding the prevention and deletion of cookies.
8. Social networks
On our website you will find references to the social network YouTube, to which the following data privacy notice applies:
For showing our videos, we use the video service from YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube").
Where you have integrated YouTube videos directly into our website, YouTube will transmit the content of the embedded video directly to your browser. At the same time, certain data will be transmitted by your browser to YouTube. This occurs only when you click on the video. The legal basis is Art. 6 (1), f) GDPR. We have no influence over the scope of the data collected by YouTube in this way. As far as we are currently aware, these data include, particularly for showing the embedded YouTube videos, the following data:
1. the page visited on our website that contains the video,
2. the data generally transmitted by your browser (IP address, browser type and version, operating system, time),
3. in the case of registered and logged-on YouTube or Google users, their Google user ID.
Embedded YouTube videos can likewise be hidden by means of browser add-ons so that no data are collected by YouTube. Further information on the purpose and scope of the collection and processing of data by YouTube can be found in the data protection statement. You will also find there further information on your rights and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.