1. Privacy at a glance


General information

The following notes give a simple overview of what happens to your personal information when you visit our website. Personal data is all data that personally identifies you. Detailed information on the subject of data protection can be found in our privacy policy listed under this text.


Analysis tools and third-party tools

When you visit our website, your surfing behavior can be statistically evaluated. This happens mainly with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior can not be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

You can object to this analysis. We will inform you about the possibilities of objection in this privacy policy.

2. General information and mandatory information


data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

If you use this website, various personal data will be collected. Personal information is information that personally identifies you. This Privacy Policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the Internet (for example, when communicating via e-mail) may have security vulnerabilities. A complete protection of the data from access by third parties is not possible.


Note to the responsible body

The responsible data processing unit on this website is:

JC Sandalwood Trading GmbH
Van-der-Smissen-Straße 2
22767 Hamburg

phone: 040 329696977
E-Mail: shop@jcsandalwood.de

Responsible entity is the natural or legal person who, alone or in concert with others, decides on the purposes and means of processing personal data (such as names, e-mail addresses, etc.).


Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an existing consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.


Right of appeal to the competent supervisory authority

In the case of violations of data protection law, the person concerned has the right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found on the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.


SSL or TLS encryption

This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or. TLS encryption. You can recognize an encrypted connection by changing the address line of the browser from "http: //" to "https: //" and the lock symbol in your browser line.

If SSL or TLS encryption is enabled, the data you submit to us can not be read by third parties.


Encrypted payments on this website

If, after the conclusion of a fee-based contract, there is an obligation to provide us with your payment details (eg account number for direct debit authorization), this data will be required for payment processing.

Payment transactions via the common means of payment (Visa / MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by changing the address line of the browser from "http: //" to "https: //" and the lock symbol in your browser line.

In the case of encrypted communication, your payment details that you submit to us can not be read by third parties.


Information, blocking, deletion

You have the right to free information on your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to rectification, blocking or deletion of this data. For further information on personal data you can contact us at any time at the address given in the imprint.


Contradiction against advertising mails

The use of published in the context of the imprint obligation contact information for sending unsolicited advertising and information materials is hereby rejected. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam e-mails.

3. Data collection on our website


Cookies

The internet pages partly use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, the acceptance of cookies for certain cases or generally exclude and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you wish to use (eg shopping cart function) are processed on the basis of Art. 6 para. 1 lit. f DSGVO saved. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (such as cookies for analyzing your surfing behavior) are stored, they will be treated separately in this privacy policy.


Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • used operating system
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

A merge of this data with other data sources will not be done.

The basis for data processing is Art. 6 para. 1 lit. f DSGVO, which allows the processing of data for the performance of a contract or pre-contractual measures.


contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request and in case of follow-up questions. We will not share this information without your consent.

The processing of the data entered into the contact form is therefore exclusively based on your consent (Art. 6 (1) lit. DSGVO). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The information you provide in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or delete the purpose for data storage (for example, after your request has been processed). Mandatory statutory provisions - especially retention periods - remain unaffected.


Registration on this website

You can register on our website to use additional features on the site. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be given in full. Otherwise, we will reject the registration.

For important changes, such as the scope of the offer or for technical changes, we use the e-mail address specified during registration to inform you in this way.

The processing of the data entered during registration takes place on the basis of your consent (Art. 6 (1) lit. DSGVO). You can revoke your consent at any time. An informal message by e-mail to us is sufficient. The legality of the already completed data processing remains unaffected by the revocation.

The data collected during registration will be stored by us as long as you are registered on our website and will subsequently be deleted. Legal retention periods remain unaffected.


Comments on this website

In addition to your comment, the comment function on this page will also contain information about when the comment was created, your e-mail address and, if you do not post anonymously, the username you selected.

Storage duration of the comments

The comments and related data (e.g., IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g., offensive comments).

Legal basis

The comments are stored on the basis of your consent (Art. 6 (1) a DSGVO). You can revoke your consent at any time. An informal message by e-mail to us is sufficient. The legality of the already completed data processing operations remains unaffected by the revocation.


Processing data (customer and contract data)

We collect, process and use personal data only insofar as they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which allows the processing of data to fulfill a contract or pre-contractual measures. We collect, process and use personal data on the use of our website (usage data) only insofar as this is necessary in order to enable or charge the user for the use of the service.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.


Data transmission at the conclusion of the contract for online shops, retailers and goods dispatch

We only transfer personal data to third parties if this is necessary in the course of the contract, for example to the companies entrusted with the delivery of the goods or the bank responsible for processing the payment. A further transmission of the data does not take place or only if you have expressly consented to the transmission. A transfer of your data to third parties without explicit consent, such as for advertising purposes, does not occur.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which allows the processing of data to fulfill a contract or pre-contractual measures.

4. Newsletter


Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you, as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data are not collected or only on a voluntary basis. We use this data exclusively for the delivery of the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form takes place exclusively on the basis of your consent (Art. 6 (1) lit. DSGVO). The granted consent to the storage of the data, the e-mail address and their use for sending the newsletter can be revoked at any time, for example via the "unsubscribe" link in the newsletter. The legality of the already completed data processing operations remains unaffected by the revocation.

The data deposited with us for the purpose of obtaining the newsletter will be saved by us from the newsletter until your cancellation and will be deleted after cancellation of the newsletter. Data that has been stored for other purposes with us (such as e-mail addresses for the members area) remain unaffected.


Klick-Tipp

This website uses Klick-Tipp for sending newsletters. Provider is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd's Bush Road, London W6 7NJ, United Kingdom.

Klick-Tipp is a service that helps u.a. the dispatch of newsletters can be organized and analyzed. The data entered by you for the purpose of newsletter subscription will be stored on the servers of Klick-Tipp.

Data analysis by Klick-Tipp

If we send out newsletters with the help of Klick-Tipp, we can determine if a newsletter message has been opened and which links have been clicked on.

Klick-Tipp also allows us to subdivide the newsletter recipients into different categories (so-called tagging). In this case, the newsletter recipients can be e.g. subdivided by gender, personal preference (e.g., vegetarian or non-vegetarian) or customer relationship (e.g., customer or potential customer). In this way, the newsletters can be better adapted to the respective target groups. For more information, please visit: https://www.klick-tipp.com und https://www.klick-tipp.com/handbuch.

If you do not want an analysis by Klick-Tipp, you must therefore unsubscribe the newsletter. For this purpose, we provide a link in every newsletter message. Furthermore, you can unsubscribe from the newsletter directly on the website.

Legal basis

Data processing is based on your consent (Article 6 (1) (a) GDPR). You can revoke this consent at any time. The legality of the already completed data processing operations remains unaffected by the revocation.

storage time

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us from the newsletter until your subscription and deleted after the unsubscription of the newsletter both from our servers and from the servers of Klick- Tipp. Data that has been stored for other purposes with us (such as e-mail addresses for the members area) remain unaffected.

For further information, please refer to the privacy policy of Klick-Tipp: https://www.klick-tipp.com/datenschutzerklaerung.

Conclusion of an order data processing contract

We have entered into a contract data processing contract with Klick-Tipp, in which we commit Klick-Tipp to protect our customers' data and not share them with third parties.

Userlike

This website uses Userlike's live chat software. Userlike uses cookies to store the content of the chat while you are waiting on the site and, if possible, to connect you to the same operator. The data collected will not be used to personally identify the visitor to the Website; they will only be merged with personal data of the owner of the pseudonym if personal data is voluntarily provided to Live Chat when using the tool. You can find the privacy policy of Userlike here: https://www.userlike.com/de/privacy_policy

Die Datenschutzrichtlinie von Userlike finden Sie hier: https://www.userlike.com/de/privacy_policy.

5. Plugins und Tools


Google Web Fonts

This site uses so-called web fonts, provided by Google, for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

To do this, the browser you use must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

If your browser does not support web fonts, a default font will be used by your computer.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/.

6. Payment provider


PayPal

On our website we offer u.a. Payment via PayPal. Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").

If you choose to pay via PayPal, the payment details you enter will be sent to PayPal.

The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of historical data processing operations.


Stripe

On our website we offer u.a. Payment via Stripe. Provider of this payment service is Stripe, Inc. 185 Berry Street, Suite 550, San Francisco, CA 94107, USA.

The transmission of your data to Stripe is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of historical data processing operations.


Instant bank transfer („Sofortüberweisung“)

On our website we offer u.a. Payment by "Sofortüberweisung". Provider of this payment service is the Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter "Sofort GmbH").

With the help of the procedure "Sofortüberweisung" we receive a payment confirmation from Sofort GmbH in real time and can immediately start to fulfill our obligations.

If you have decided to use the "Sofortüberweisung" method of payment, please forward the PIN and a valid TAN to Sofort GmbH, with which you can log in to your online banking account. Sofort GmbH automatically checks your account balance after logging in and transfers the money to us using the TAN you have submitted. Afterwards it will send us a transaction confirmation without delay. After logging in, your sales, the credit line of the credit line and the existence of other accounts as well as their stocks are also checked automatically.

In addition to the PIN and the TAN, the payment data entered by you as well as personal data will be transmitted to Sofort GmbH. The personal data are first name, surname, address, telephone number (s), e-mail address, IP address and possibly further data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud.

The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of historical data processing operations.

For details on payment with Sofortüberweisung refer to the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.