data protection

When using our website and the associated shop offers, it may be necessary for various personal data to be collected directly or indirectly. We attach great importance to protecting your data and safeguarding your privacy. With this data protection declaration, we would like to inform you about the content, type and extent of data use. You can also find the necessary information about the rights to which you are entitled below. The legal requirements that we also measure ourselves against are basically based on the General Data Protection Regulation (GDPR).

1. Terminology

To better understand the terms used in this data protection declaration, they will first be defined. The information on this refers to Art. 4 GDPR.

a) “Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

(b) ‘Data subject’ means any identified or identifiable natural person whose personal data are processed by the controller.

c) The ‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, decides on the purposes and means of the processing of personal data.

(d) ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

(e) ‘recipient’ means a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be considered recipients.

(f) ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorised to process personal data under the direct authority of the controller or processor.

(g) ‘Consent’ means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data concerning him or her.

h) "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term is broad and covers practically any handling of data.

(i) ‘pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

(j) ‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

2. Person responsible

Responsible within the meaning of the GDPR and therefore the direct contact person is:

Daniel Hufenbach
Bruno-Bürgel-Weg 18
12439 Berlin
Phone: 0162 - 474 56 10

Fax: 030 - 315 675 98

Email: info@becopa.de

Internet: www.becopa.de

3. Type and purpose of use of collected data

a) Visiting our website alone is possible without providing any further information about your identity or entering any other data. However, when you access our website, information is automatically transmitted by the server used and temporarily stored in any log files. This includes the IP address of the requesting computer, the date and time of the web page access, the name and URL of the file accessed, the website from which the access is made (referrer URL) and the browser you use or, if applicable, the name of the provider you use.

This ensures that the connection to our website is established smoothly and without any problems, and that it is therefore convenient to use. It also ensures system security and the stability of the website, and any administrative purposes can be fulfilled.

The legal basis for this is Art. 6 Paragraph 1 Clause 1 Letter f) of GDPR, to which we refer for the purposes mentioned. This data will not be processed in any other way, especially not for the purpose of further identifying you personally.

We would also like to point out at this point that we use cookies or any analysis tools. You can find more information about this below, section… of this privacy policy.

b) You can also use a contact form. You can use this to communicate with us directly electronically. However, this is only possible if you provide the data specified there, in particular a valid email address. You can provide further information, such as your telephone number, on a voluntary basis, but you are not required to do so. If your request has been resolved after the request has been made, we will no longer store the data, but will delete it automatically.

The legal basis for this is Art. 6 Paragraph 1 Clause 1 Letter a) of GDPR. The use of the contact form and the transmission of the corresponding data are based on your voluntarily given consent.

c) Finally, you have the option of using our online shop. The online shop is also used by entering various data that is required for the purchase and order processing. You are free to make a purchase as a guest and thus without registering and creating a customer account or by registering and thus creating a customer account. The latter makes it easier to log in again in the event of a repeat order in the future without you having to provide all of your order and contact details again.

The data collected when using the online shop includes the name and address of the respective customer, the email address, if applicable the telephone number or similar means of contacting us. This data is used exclusively for order processing. This also includes any further communication with you that may be required and for invoicing. This data also serves to process any liability and recourse cases and/or to assert claims against you arising from the contractual relationship. This data is also used for purely technical administration. During the ongoing ordering process, you will be informed again about the use of data.

The legal basis for this is the fulfillment of obligations arising from the concluded purchase contract or other contractual relationship concluded via our shop page in accordance with Art. 6 Para. 1 Clause 1 lit b) GDPR.

Please note that this data will be stored until the expiry of the statutory retention period specified by us and will only be deleted after this. A longer obligation may arise for us due to tax law or other legal requirements, see Art. 6 Para. 1 Clause 1 Letter c) GDPR. Voluntary consent to longer storage remains unaffected by this, see above and Art. 6 Para. 1 Clause 1 Letter a) GDPR.

4. Sharing of collected data

Unless otherwise required for contractual processing, the personal data collected will not be passed on to or processed by third parties. In the event that personal data is to be passed on, this will only be done to the extent that this is necessary in accordance with Art. 6 Para. 1 S.1 lit b) GDPR. This includes passing on data to shipping companies to be commissioned or to the institutions used for payment. Any further passing on will only take place if you have expressly consented to this, cf. Art. 6 Para. 1 S.1 lit a) GDPR, the passing on is necessary in accordance with Art. 6 Para. 1 S.1 lit f) GDPR to assert and enforce legal claims and there is no further interest in protection for you, or if we are legally obliged to pass on the data in accordance with Art. 6 Para. 1 S.1 lit c) GDPR.

We would also like to point out the following: When paying using the payment methods "PayPal direct debit" and "PayPal purchase on account", the purchase price claim is assigned to PayPal (Europe) S.à rl et Cie, SCA 22-24 Boulevard Royal L-2449 Luxembourg. Your bank or credit card account will be debited when the order is completed.

The data required to process the payment is therefore transmitted to PayPal AG. To estimate the risk of default, PayPal AG may carry out a credit check. Information on your previous payment behavior and credit information based on mathematical-statistical procedures using address data (scoring) is obtained from infoscore Consumer Data GmbH, Rheinstrasse 99, 76532 Baden-Baden and Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss. You can obtain further information on the processing and storage of your data directly from PayPal AG.

If we process data in a third country, i.e. outside the EU or EEA, or if we use third-party services or disclose and transmit data to third parties, this will only be done in the context of fulfilling our contractual obligations, on the basis of your consent, due to a legal obligation or due to our legitimate interests. However, such processing in a third country will always be carried out in compliance with the requirements of Art. 44 ff GDPR.

5. Processing of data by processors

It is possible that data collected by us through the use of our website is not processed directly by us, but by third parties, the so-called processors. This can be the case, for example, with the technical implementation, expansion or security of the shop system. However, we only work with processors in accordance with Art. 28 GDPR. In particular, we observe Art. 28 Para. 2 GDPR, according to which such processing only takes place on the basis of a written consent previously concluded between us and the processors.

6. Your rights as a data subject

As a data subject, you have various rights that you can assert directly against us. These include

a) the right to information pursuant to Art. 15 GDPR as to whether personal data in question have been processed. If this is the case, you have the right to information about the purpose of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from me, as well as the existence of automated decision-making including profiling and, if applicable, to request meaningful information about its details;

b) the right to immediately request the rectification of inaccurate or completion of your personal data stored by us in accordance with Art. 16 GDPR;

c) the right pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

d) the right to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

e) the right under Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller.

Furthermore, you have the right to revoke your consent to data processing that you have previously given us in accordance with Art. 7 (3) GDPR with effect for the future. However, such a revocation of consent does not affect the processing that has already taken place and which was carried out on the basis of a previously lawfully granted consent.

In addition, you have the right to lodge a complaint under Art. 77 GDPR. You can submit such a complaint directly to the competent supervisory authority

In addition, you can object to the processing of personal data concerning you under the conditions of Art. 21 GDPR, provided that this processing is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter f) GDPR and there are reasons that arise from your person or the objection is directed in particular against direct advertising. The objection is effective for the future.

7. Data security

To ensure the security of your data, we use suitable technical and organizational security measures to protect the data against manipulation of any kind, loss or destruction, or against unauthorized access by third parties. Such measures are subject to regular development based on the state of technical development. In particular, we use the SSL procedure to visit our website. You will find a reference to this in the https information in the address line of your respective browser.

8. Cookies

The site we provide works using so-called cookies. These are small files that are created by your browser and stored on your own device when you visit the website.

Cookies are used to optimize the usability of the website's online offering. Temporary or permanent cookies can be set. Temporary cookies are used to display the contents of the shopping cart, for example, while permanent cookies are used to recognize your login status. Cookies can also be used to store information that is used for range measurement or marketing purposes.

The possibility of using cookies arises for us from Art. 6 Para. 1 Clause 1 Letter f) GDPR

Furthermore, we would like to point out that you have the option of deactivating the storage of cookies on your device via the system settings of your browser. You can also delete stored cookies via the system settings of your browser. However, such deactivation or deletion can lead to restrictions in the functionality of the online service we provide.

9. Google AdWords/Google Analytics

We use the online marketing process Google AdWords to optimize and analyze our online offering. This helps us, for example, with the search engine placement of our offers. This means that the respective interested user is shown targeted offers that were previously determined based on usage behavior. Cookies are also used for this, see section 8. However, there is no direct personal identification of the interested party. In addition, we receive a so-called individual conversion cookie, which is used to create conversion statistics. However, this evaluation only gives us an anonymized total number of users who have clicked on our respective advertising offer. Further personal identification is neither possible nor intended. The processing by Google itself takes place without reference to data such as names, email addresses, etc., but exclusively on the anonymously created data of the respective cookies. If you do not wish to use this offer, we recommend deactivating it via your browser, see also section 8.

The website also uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", see section 8. The information on your use of this website generated through the cookie is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will shorten your IP address beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being stored by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

10. Integration of third-party providers, especially social media

In addition to our shop offering, we also maintain various online presences within social networks and platforms or are gradually building them up where necessary in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. In principle, when accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our data protection declaration, we process the data of users if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages. The integration of corresponding social media plug-ins on our website is based on Art. 6 Para. 1 Clause 1 Letter f) of GDPR.

a) Facebook Social Plugins

You may find social plugins from Facebook on our website. These are, first and foremost, technical offerings from Facebook itself.

As soon as you visit a website that contains such a Facebook plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted directly from Facebook to your browser, which then integrates it into the website. By integrating the plug-in, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook when you visit our website, it is possible for Facebook to associate your visit to our website with your Facebook account. This allows Facebook to use this information for advertising purposes or similar purposes. If you do not want this to happen, you must log out of your Facebook account before visiting our website.

b) Twitter

You will also find social plugins from the Twitter platform on our website. When you use these plugins, a connection is established between your browser and Twitter by clicking on them. Here, too, your visit to the website can be assigned by Twitter. If you do not want this, you must log out of your Twitter account before visiting our website.

c) GooglePlus

You will also find social plugins from the GooglePlus platform on our website. When you use these plugins, a connection is established between your browser and GooglePlus by clicking on them. Here, too, your visit to the website can be assigned by Google. If you do not want this, you must log out of your GooglePlus account before visiting our website.

d) Pinterest

Content from the Pinterest platform can also be integrated into our website. This primarily includes media such as images or texts, as well as comparable media content. Your visit to the website can also be assigned here. Consequently, you must log out of your Pinterest account before visiting our website if you do not want such an assignment.

e) Idealo

The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated into our website. When you access our website, the browser used on your device automatically sends information to the idealo server. This information is temporarily stored in a so-called server log file for 7 days. The following information is recorded without your intervention and stored until it is automatically deleted:

IP address of the requesting computer,
date and time of access,
name and URL of the retrieved file,
website from which access is made (referrer URL),
browser used and, if applicable, the operating system of your computer and the name of your access provider.

The temporary storage of the IP address by the system is necessary to enable the website to be delivered. For this purpose, the IP address must be stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. The data is also used to optimize the website and to ensure the security of the information technology systems. This data will not be stored together with other personal data. The legal basis for data processing is Art. 6 Para. 1 Clause 1 Letter f of GDPR."

11. Links to third-party websites

Our website contains links to other websites. If we have set such a link here, it has been carefully checked beforehand. However, we have no influence on the current or future design or content of the linked pages. We are not responsible for their content. Nor do we adopt their content as our own. Liability for illegal, incorrect or incomplete content therefore lies solely with the site operator. The same applies to any liability issues for damages caused by use. The site operator is also liable here. We are only liable if we have indications of illegal, unlawful or criminal content and it is technically possible and reasonable for us to prevent use via the link.

12. Newsletter

You have the option of signing up for a newsletter. We use this to inform you about current offers and other information about the services we offer. You can sign up for our newsletter by entering your email address. You do not need to provide any further data. You can only sign up for the newsletter with your consent. After registering to receive the newsletter, you will receive a registration email from us in which you will be asked again to confirm your previous registration on the website, a so-called double opt-in procedure.

The newsletter is therefore sent based on consent in accordance with Art. 6 Para. 1 lit b), Art. 7 GDPR. If consent is not necessary, the newsletter is sent based on legitimate interests in direct marketing in accordance with Art. 6 Para. 1 S.1 lit f) GDPR.

Registering to receive the newsletter is neither a requirement nor any other condition for using our online service. You can also cancel or revoke your newsletter subscription at any time. This can be done via the cancellation link in the newsletter sent to you. However, please note that there is the possibility of internal storage of your email address in order to be able to prove the consent you have previously given us if necessary.

The newsletter provided by us is sent using the shipping service provider Mailjet SAS, 13-13 bis, rue de l'Aubrac, 75012 Paris, France. You can view the shipping service provider's data protection regulations here: https://www.mailjet.de/privacy-policy/ . The shipping service provider is used on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR and an order processing contract in accordance with Art. 28 Para. 3 S. 1 GDPR.

The shipping service provider can use the recipients' data in pseudonymous form, i.e. without the possibility of assigning it to a user, to optimize or improve its own services, e.g. for the technical optimization of the sending and presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them directly or to pass the data on to third parties.

as of May 24, 2018