Privacy policy

Unless otherwise specified below, the provision of your personal data is neither required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide will have no consequences. This applies only to the extent that no indication to the contrary is made in the subsequent processing operations.
“Personal Data” means any information relating to an identified or identifiable natural person.

Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision. If the EU Commission has not issued an appropriateness decision, e.g. for transfers to the U.S., data transfers are based on, among other things, standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Contact

Responsible
Contact us if you wish. Data controller is: PERÚ PURO Ltd, Eckenheimer Landstr. 50, 60318 Frankfurt Germany, 0178/6680854, contact@perupuro.de

Initiative contact of the customer by e-mail
If you initiate business contact with us by e-mail, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing is used to process and respond to your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to exercise this right at any time based on Art. 6 para. 1 lit. f DSGVO based processing of personal data concerning you.
We will only use your e-mail address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.
 

Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting us.
If the contact serves the implementation of pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.

If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to exercise this right at any time based on Art. 6 para. 1 lit. f DSGVO based processing of personal data concerning you.

We will only use your e-mail address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.

Customer account        Orders      

Customer account
When opening a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and to simplify order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your customer account will be deleted afterwards.

Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision. To the extent that no adequacy decision of the EU-Commission is present, such as for transfers to the U.S., data transfers are based on, among other things, standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Advertising      

Use of the e-mail address for sending newsletters
We use your e-mail address independently of the contract processing exclusively for our own advertising purposes for newsletter dispatch, provided that you have expressly consented to this. The processing is carried out on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list. 

Your data will be passed on to a service provider for e-mail marketing within the framework of order processing. The data will not be passed on to other third parties.

Use of the e-mail address for sending direct advertising
We use your e-mail address, which we have received in connection with the sale of a good or service, to send you electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the e-mail address is required for the conclusion of the contract. Failure to provide will result in the inability to enter into a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in direct marketing. You can object to this use of your e-mail address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the link provided for this purpose in the promotional email. This does not incur any costs other than the transmission costs according to the prime rates.

Shipping service provider      

Forwarding of the e-mail address to shipping companies for information about the shipping status
We pass on your e-mail address to the transport company as part of the contract processing, provided you have expressly agreed to this in the order process. The purpose of the transfer is to inform you by e-mail about the shipping status. The processing is carried out on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You may revoke your consent at any time by notifying us or the carrier without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

Payment service provider      

Use Complianz GDPR Cookie Consent
We use the Complianz GDPR Cookie Consent plugin from Complianz B.V. (Atoomweg 6B 9743 AK Groningen, The Netherlands; “Complianz”) on our website.
The plug-in allows you to give consent to data processing via the website, in particular the setting of cookies, as well as to exercise your right to withdraw consent already given. Data processing serves the purpose of obtaining and documenting required consents for data processing and thus complying with legal obligations. Cookies can be used for this purpose. Information that may be collected and transmitted to Complianz includes: uniquely identifiable ID, consent status. This data will not be passed on to other third parties.
The data processing is carried out for the fulfillment of a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.
You can find more information on data protection at Complianz at: https://complianz.io/legal/privacy-statement/?cmplz_region_redirect=true&region=eu

Advertising tracking      

Use of the Facebook Pixel
We use the remarketing function “Custom Audiences” of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland “Facebook”) on our website.
Meta Platforms Ireland and we are jointly responsible for the collection of your data and transmission of this data to Facebook when the service is integrated. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which defines the respective responsibilities. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. Thereafter, we are responsible in particular for complying with the information obligations under Articles 13, 14 GDPR, for complying with the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the Service, and for complying with the obligations under Articles 33, 34 GDPR to the extent that a personal data breach affects our obligations under the Joint Processing Agreement. Meta Platforms Ireland has the responsibility to enable data subject rights under Art. 15 – 20 GDPR, to comply with the security requirements of Art. 32 GDPR with respect to the security of the Service, and to comply with the obligations under Art. 33, 34 GDPR to the extent that a personal data breach affects Meta Platforms Ireland’s obligations under the Joint Processing Agreement.
The application serves the purpose of targeting visitors to the website with interest-based advertising on the social network Facebook. For this purpose, Facebook’s remarketing tag was implemented on the website. Via this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook server which of our pages you have visited. Facebook associates this information with your personal Facebook user account. When you visit the Facebook social network, you are then shown personalized, interest-based Facebook ads. Your data may be transferred to the USA. There is no EU Commission adequacy decision for the USA. The data transfer is based, among others, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://www.facebook.com/legal/EU_data_transfer_addendum.
The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
For more information about the collection and use of data by Facebook, about your rights in this regard and options for protecting your privacy, please refer to Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

Plug-ins and other

Use of GoogleMaps
We use the GoogleMaps embedding feature of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, “Google”) on our website.
The function enables the visual display of geographical information and interactive maps. In doing so, Google also collects, processes and uses data of the visitors of the websites when calling up the pages in which GoogleMaps maps are integrated.
Your data may also be transferred to the USA. There is no EU Commission adequacy decision for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
For more information on the collection and use of data by Google, please refer to Google’s privacy policy at https://www.google.com/privacypolicy.html. There you also have the option in the Privacy Center to change your settings so that you can manage and protect your data processed by Google.

YouTube use
We use the YouTube video embedding feature of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website.YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The “Enhanced privacy mode” option is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video, information about it is transmitted to YouTube and stored there. Your data may be transferred to the USA. There is no EU Commission adequacy decision for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
For more information about the collection and use of data by YouTube and Google, about your rights in this regard and options for protecting your privacy, please see YouTube’s privacy policy at https://www.youtube.com/t/privacy.

Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of uniform display of fonts on our website. In order to load the fonts, a connection to Google servers is established when the page is called up. Cookies can be used for this purpose. Among other things, your IP address and information about the browser you are using will be processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. There is no EU Commission adequacy decision for the USA. The data transfer is carried out, among others, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks.
The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
For more information on data processing and data protection, please visit https://www.google.de/intl/de/policies/ and https://developers.google.com/fonts/faq.

Data subject rights and storage period

Duration of storage
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, thereafter taking into account statutory, in particular tax and commercial law retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights according to Art. 15 to 20 DSGVO: the right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, according to Art. 21 para. 1 DSGVO the right to object to processing based on Art. 6 para. 1 f DSGVO, as well as against processing for the purpose of direct marketing.

Right of complaint to the supervisory authority
In accordance with Art. 77 DSGVO, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.

You can lodge a complaint with, among others, the supervisory authority responsible for us, which you can reach at the following contact details:

Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden
Tel.: +49 611 14080
Fax: +49 611 1408900 or +49 611 1408901
E-mail: poststelle@datenschutz.hessen.de

Right of objection
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO, you have the right to object to these processing operations at any time with effect for the future for reasons arising from your particular situation.
After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.

If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. After the objection has been made, we will terminate the processing of the data concerned for the purpose of direct marketing.

last update: 10.01.2022