We, kokochii – soles online GmbH (hereinafter also referred to as “kokochii”), are pleased about your visit to our online shop https://www.kokochii.de (hereinafter also referred to as “website” and/or “online shop”) as well as about your interest in our offers and our company.
We are aware that it is important to you that your personal information and data is handled carefully and in accordance with the law. We naturally comply with the legal provisions for the protection of your personal data.
In the following data protection declaration, we would like to inform you in particular about the collection and processing of your personal data by us when you use our website with the integrated online shop, as well as about the rights to which you are entitled with regard to the personal data collected and processed.
kokochii-soles online GmbH
Dr.-Sauermann-Weg 3
82319 Starnberg
Germany
E-mail: info@kokochii.de
We, as the controller within the meaning of Art. 4 No. 7 GDPR, are available to you as a contact for all questions and concerns regarding data protection on the kokochii online shop using the contact details provided.
Definitions
The data protection declaration is based on the following definitions:
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
“Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorised to process personal data under the direct authority of the controller or processor.
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data concerning him or her.
Information about the collection and processing of data
Visiting our Kokochii website (for information purposes) and ordering our products through our online shop is only possible with registration or login. We only process personal data to the extent that this is regulated in the following provisions.
As a general rule, we will only process your personal data if there is a legal basis for doing so or if we have your consent. Providing personal data or giving consent is generally voluntary. There are no negative consequences for you if you do not give your consent or do not provide us with personal data.
Please note that in the event that we collect personal data based on your consent, you can revoke this consent at any time by informing the controller (see section 2) without affecting the legality of the processing of personal data carried out on the basis of the consent until the revocation.
The following data collection and processing is carried out on our website:
Accessing the website (server log files/standardized visit log)
When you visit our website, the web server collects and stores information in a standardized manner. The automatically collected information listed below is collected and processed to ensure the operability and security of our website.
This automatically collected information is
- IP address of the requesting computer
- Date and time of the server request
- File names and URL/address you accessed,
- http status code,
- Referrer URL (i.e. the website you previously visited)
- the browser used,
- the operating system used and
- Language and version of the browser software.
The legal basis for the processing carried out in this context is Art. 6 Paragraph 1 Clause 1 Letter f) GDPR. Their collection and storage is necessary to ensure the (technical) security and stability of our website, for example in the event of hacker attacks.
The information listed above (server log) is stored separately from any other data you may have sent us, for example to answer inquiries (or similar). The data listed above is not linked to this other data. It is not possible for us to draw any conclusions about you or your individual behavior.
The access data collected when using our website is only stored for the period for which this data is required to achieve the above purposes. Your IP address is stored on our web server for a maximum of 7 days for IT security purposes.
Other data collected when using the website
We only process further personal data to the extent and in accordance with the principles set out below:
Use of the contact form/contact
In our online shop you have the option of contacting us by sending us an email and sending us inquiries or messages. In order to be able to respond to such contacts and to process them as desired and in accordance with the purpose of your inquiry, we must access the personal data you provide with the respective inquiry (e.g. first name, last name, email address, telephone number) and process and store them accordingly. We do not pass this data on to third parties unless this is necessary in order to process and answer your contact request or you have given us your consent.
The legal basis for the storage and processing of your personal data to answer and process your contact email is Art. 6 Para. 1 Sentence 1 Letter b) GDPR, provided that your request is related to the initiation, execution or termination of a contract. In all other cases, we store and process your personal data on the basis of a legitimate interest in accordance with Art. 6 Para. 1 Sentence 1 Letter f) GDPR, for the proper processing of customer/contact inquiries.
The data you enter in the contact form will remain with us until the purpose for storing/processing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Use of our online shop/order process
On our website, under the “Shop” section, you have the opportunity to purchase our products conveniently from home (so-called “order”).
Selection of goods and entry of order data/prepayment
To record your selection of goods (see “Step 1” or section 2.2.1 of our General Terms and Conditions, available at https://www.kokochii.de/agb/ ) and for the completion and execution of your order (see “Step 2” or section 2.2.2 of our General Terms and Conditions, available at https://www.kokochii.de/agb/) regarding the purchase of our products, we require your personal data. Only by processing this data can an effective contract for the purchase of our products be concluded, the order sent to you, payments processed and the communication required or desired in connection with the order (e.g. sending electronic order confirmations, order confirmations and invoices) carried out.
Personal data collected
The personal information required for the conclusion of the contract is marked with "*" in the order process as mandatory information (e.g. first name, last name, billing and delivery address, email address, billing and payment details). Of course, in addition to the mandatory information, you can also provide us with other personal information that we can process in addition to processing your order and executing the contract as requested (e.g. telephone number, mobile number).
Legal basis
For the purpose of contract processing in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR, we collect personal data if you voluntarily provide it to us as part of your order.
Storage period
After the contract has been fully processed, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods in accordance with Art. 6 Paragraph 1 Clause 1 Letter c of GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration.
Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this data protection declaration.
Use of the Kokochii website/product configuration
A large number of Kokochii products, in particular the custom-made shoe insoles from Kokochii (hereinafter referred to as “Kokochii insoles”) are also made exclusively for you, which is why a configuration via the so-called “Kokochii website”, which you can access as part of the order confirmation (see “Step 2” or Section 2.2.2. of our General Terms and Conditions, available at https://www.kokochii.de/agb/) is required.
Personal data collected
To ensure the fit and functionality of Kokochii products, we must request and process additional information, such as your shoe size or a diagnosed foot condition. To use the Kokochii website, you must create a user account. To do this, you must provide at least your login name (email address and specially assigned user password). If you use our Kokochii website as a registered user, purchases are documented in your user account in order to provide you with further details about your order and the status of your order processing. You also have the option of storing and editing billing and delivery addresses. We process other information (e.g. GPS location data) if you allow us to do so.
Please also note that we will also process your personal data provided during the ordering process in order to contact you in the event of a complaint or service request.
Legal basis
The legal basis for the aforementioned collection and processing of your personal data is Art. 6 Paragraph 1 Sentence 1 Letter b) GDPR, i.e. you provide us with the data on the basis of the contractual relationship concluded between you and Kokochii or for the purpose of its initiation, implementation and processing.
Storage period
After the contract has been fully processed, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods in accordance with Art. 6 Paragraph 1 Clause 1 Letter c of GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration.
Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this data protection declaration.
Further data processing for contract execution
Manufacturing/ Manufacturer
In order to fulfill the contract in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR, we pass on your data to the certified shoe insole manufacturer commissioned to deliver Kokochii, who produces the Kokochii insoles according to your information in the ordering process. The legal basis for this transfer of your personal data is Art. 6 Paragraph 1 Clause 1 Letter b of GDPR, as the transfer is necessary for the implementation of the contract concluded between you and Kokochii in an ordering process.
Personal data collected
For the purpose of manufacturing/producing the goods, we pass on the personal data collected during the ordering process so that the ordered goods can be manufactured individually.
Shipping service provider
In order to fulfill the contract in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR, we will pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. We will also pass this data on as part of a package notification, provided that you have given your express consent to this.
Personal data collected
For the purpose of shipping and shipping notification, we pass on your email address and telephone number to selected shipping service providers so that they can contact you to coordinate the delivery, etc.
Storage period/ contact address
If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this privacy policy.
Payment service providers
When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers. The legal basis for the aforementioned collection and processing of your personal data is Art. 6 Para. 1 Clause 1 Letter b of GDPR, the fulfillment of the contract.
Personal data collected
Depending on the payment method selected, we pass on the data required to process the payment transaction to our technical service providers who work for us as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. In some cases, the payment service providers collect the data required to process the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
Storage period/contact option
If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this privacy policy.
PayPal
PayPal is a service of PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg. If you choose PayPal as a payment method for an order, your data required for the payment process (in particular first name/last name, address, email address, telephone and mobile number and IP address) will be automatically transmitted to PayPal.
PayPal may transmit this data to credit agencies for the purpose of identity and credit checks. PayPal may also transmit your personal data to other third parties, in particular contract processors within the meaning of Art. 28 GDPR, if this is necessary to fulfil PayPal's contractual obligations. You can find PayPal's data protection provisions at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/ view.
Cookies
General information
In some areas of the website we use so-called cookies in order to be able to provide you with our online shop functions in the most individual and convenient way possible and to support the functionality of our website (e.g. the display of the online shop on your screen/on your device) and to continually improve our presentation. Cookies are files that a web server can have the browser create on your computer/device. Some cookies are used to uniquely identify your computer/device for a certain period of time. However, some cookies only contain information about certain settings that are not personally identifiable. You can set your browser so that it informs you when cookies are placed. This makes the use of cookies transparent for you.
Any use of cookies that is not strictly necessary for technical reasons constitutes data processing that is only permitted with your express and active consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR. This applies in particular to the use of advertising, targeting or functional cookies. In addition, we will only pass on your personal data processed by cookies to third parties if you have given your express consent to do so in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.
Transient cookies
We use so-called transient cookies. These are cookies that allow you to move quickly, easily and efficiently through several online shops without having to authenticate yourself each time. These include in particular so-called session cookies. These store a so-called session ID, with which different requests from your browser can be assigned to a common session. If you visit an online shop in two windows in one browser, the shop recognizes from the session cookie that both visits are your session and can, for example, make the same shopping cart available in both windows. This means that your computer can be recognized when you return to our online shop. Transient cookies are automatically deleted after two to 14 days.
Persistent cookies
We also use persistent cookies. Persistent cookies allow for faster and more convenient access to websites, as certain default settings are already made when you visit them again, for example your language selection is saved. These persistent cookies are automatically deleted after a period of time defined in accordance with the purpose of using the persistent cookies.
The aforementioned cookies fulfil various functions:
Technically required cookies:
The use of technically required cookies is necessary to ensure the availability and functionality of our online shop as well as its safe and proper operation. Technically required cookies are used, for example, to enable the filling out of forms and to make basic functions of the online shop available.
Data processing using technically required cookies is carried out on the basis of Art. 6 (1) sentence 1 lit. b) GDPR, provided that there is a corresponding contractual relationship that makes the use of cookies necessary. Otherwise, data processing using technically required cookies is carried out on the basis of our legitimate interest in ensuring a technically fully functional and secure online shop - the legal basis for data processing in these cases is Art. 6 (1) sentence 1 lit. f) GDPR.
Functional cookies/performance cookies
Functional cookies are used to make the use of our online shop technically and user-friendly. For example, they are used to save the products in the shopping cart, display previously viewed products or record whether errors occur during use, etc. They do not collect any information that could identify you - all information collected is anonymous and is only used to improve our website and find out what interests our users. Functional cookies are sometimes set by third-party providers we use.
The following functional cookies are set on our website:
- Stripe-mid
- Borlabs
- WooCommerce
Data processing using functional cookies is carried out exclusively on the basis of your consent, which you can give when you visit our online shop via the cookie banner for functional cookies in general or for certain functional cookies. The legal basis is Art. 6 Paragraph 1 Sentence 1 Letter a) of GDPR.
Analysis cookies
Analysis cookies are used to statistically evaluate the use of our online shop and to improve our online shop based on these evaluations. They are used, for example, to count the users of our online shop, to identify the most frequently visited areas of our online shop and to track which other online shops have forwarded services to our online shop. The analysis cookies are sometimes set by third-party providers we use.
Legal basis
Data processing using analysis cookies is carried out exclusively on the basis of your consent, which you can give when you visit our online shop via the cookie banner for analysis cookies in general or for certain analysis cookies. The legal basis is Art. 6 Paragraph 1 Sentence 1 Letter a) of GDPR.
Your cookie settings
Your cookie selection history
| Date | version | Consents |
|---|
Use of Google services for web analysis and advertising purposes
We use the technologies presented below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision by the European Commission for the USA. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between joint controllers in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in the Google's privacy policy.
Google Analytics
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. By using Google Analytics, we receive statistics, which we can evaluate to improve our online shop and make it more interesting for you.
However, in order to protect your personal data, we use Google Analytics in the so-called "anonymizeIP" mode. Your IP address is only transmitted to Google in abbreviated form and processed by Google, which means that your device cannot be identified and therefore Google cannot identify you personally. In addition, we use Google Analytics without Google assigning a user ID specifically for you, the so-called "Google User ID". Only in exceptional cases is the full IP address transmitted to a Google server in the USA and only abbreviated there (further information on the purpose and scope of data collection can be found, for example, at https://policies.google.com/privacy?hl=de&gl=de) .
Please note that Google evaluates the data collected by the cookies on our behalf and only provides us with the data required for web analysis in an anonymous form in the form of statistics/evaluations. It is not possible for us to identify you personally using Google Analytics and the statistics and analyses provided through it.
Google Ads
We use the online advertising program “Google Ads” on our online shop and use so-called “conversion tracking” to analyze our advertising activities and to align them in a targeted and interest-oriented manner and to efficiently coordinate and plan our advertising campaigns.
If you click on an advert for our company placed by Google on the Internet and are redirected to our online shop, a so-called conversion cookie for conversion tracking is stored on your computer/device. This cookie has a limited validity (usually 30 days) and, in addition to technical information, contains an identifier assigned to you by Google, the so-called advertiser ID, with which Google creates a pseudonymised advertising profile. If you are registered with a Google service, Google can assign the visit to your Google account. Even if you are not registered with Google or have not logged in, there is a possibility that your IP address will become known to Google.
If you visit our website after the conversion cookie has been stored on your device and the conversion cookie is still active, both Google and we can recognize that you clicked on the ad from our Ads campaign and were thus redirected to our online shop. In this way, we can use Google Ads to generate so-called conversion statistics, which we can use to see, for example, how many users clicked on our ads, which keywords triggered this placement and how many users were redirected to a page with a conversion tracking tag. We do not use the Google Ads "Remarketing" function, which places interest-based advertising in the Google Display Network or on other online shops.
Please note that we do not receive any personal data through Google Ads and you will not be identifiable by our company at any time.
YouTube Video Plugin
To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plug-in in the extended data protection mode we use, transmitted to Google and then processed by Google, only when you play a video.
Facebook, Instagram
We do not use social media plug-ins on our websites. If our websites contain symbols from social media providers (e.g. Facebook, Instagram with symbols), we only use these for passive linking to the pages of the respective providers.
Consent management platform
We use the Usercentrics Consent Management Platform (“Usercentrics”) on our website to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage and document your consent, if required by law, to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6 Paragraph 1 Clause 1 Letter c of GDPR to fulfil our legal obligation pursuant to Art. 7 Paragraph 1 GDPR to be able to prove your consent to the processing of your personal data, to which we are subject. Usercentrics is an offer from Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, the Usersentrics web server stores a so-called server log file, which also contains your anonymized IP address, the date and time of the visit, device and browser information, and information about your consent behavior. Your data will be deleted after three years unless you have expressly consented to further use of your data in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration.
Objection to the use of technically unnecessary cookies
Google Analytics
If you do not agree to the use of Google Analytics including your data, you can prevent this according to the options described below:
You can deactivate the setting of cookies by our online shop and thus the use of Google Analytics in the settings of your browser. Information about this can be found in the help function of your browser. You can also stop the evaluation of the information collected by deleting the cookie already set by Google Analytics via your browser settings. You can also prevent data processing by Google by downloading the browser add-on for deactivating Google Analytics available at http://tools.google.com/dlpage/gaoptout?hl=de and installing it on your device ("browser plug-in"). Alternatively, you can click on the following link: Opt-out Google Analytics to have an opt-out cookie set on your device that deactivates the functions of Google Analytics for this online shop. Depending on the settings of your browser, this cookie is deleted after a certain time, so that it may be necessary to activate the cookie again on a subsequent visit. Please note that the use of our online shop may be functionally restricted if you make the aforementioned settings to avoid the use of Google Analytics.
Google Ads
In order not to be included in the conversion tracking statistics, you can prevent the storage of the conversion cookie by selecting the appropriate browser settings, in particular your cookie settings, by either deactivating the storage of cookies in general or setting your browser so that cookies from "https://www.googleadservices.com“ can be blocked. You can find more information about deactivating cookies in the help function of your browser. In addition, you can delete a cookie stored in your browser by Google Ads at any time via your Internet browser.
You can also deactivate personalized advertising in the Google advertising settings. Instructions can be found at http://www.google.de/settings/ads. You can also deactivate interest-based ads from providers who are part of the "About Ads" self-regulation campaign using the link http://www.aboutads.info/choices. However, this setting will be deleted if you delete your cookies. You also have the option of managing the storage of cookies via the cookie banner.
Other
If you do not agree to our use of cookies, you can deactivate the storage of cookies for our site or in general in the settings of your browser. You can find information about this in the help function of your browser. You also have the option of deleting saved cookies in the settings of your browser at any time. You can also make settings for the use of cookies (e.g. which cookies may be used) in the so-called cookie banner, which is displayed when you visit our online shop. Alternatively, you can revoke your consent at any time by sending a message to the contact address provided in section 2.
If you do not accept cookies, the functionality of our website may be limited.
Period of data storage
Unless expressly stated otherwise above or below, your personal data that we process on the basis of a legal permit or on the basis of your consent will generally only be stored for as long as is necessary for the purposes set out above in section 4 or, alternatively, until the point in time at which the previously granted consent is revoked or the processing of your personal data is effectively objected to in accordance with section 5 of this data protection declaration.
Excluded from the deletion are personal data that are subject to Kokochii's archiving and retention obligations (e.g. according to Section 257 HGB, Section 147 AO).
Data security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties, taking into account the state of the art, the implementation costs and the nature, scope, context and purpose of the processing as well as the existing risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continuously improved in line with technological developments.
We will be happy to provide you with further information on request. Please contact
Please contact us using the contact details in section 2.
Transfer of personal data to third parties; justification
Unless expressly mentioned above, we generally do not pass on your personal data to third parties unless we are legally entitled or obliged to do so or you have given us your consent. The following categories of recipients, who are usually contract processors, may have access to your personal data:
Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security, telecommunications). The legal basis for the transfer is then Art. 6 Para. 1 Clause 1 Letter b or Letter f of GDPR, unless they are contract processors;
State bodies/authorities, insofar as this is necessary to fulfil a legal obligation. The legal basis for the transfer is then Art. 6 Para. 1 Clause 1 Letter c of GDPR;
Persons employed to carry out our business operations (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, those involved in company acquisitions or the establishment of joint ventures, logistics, marketing). The legal basis for the transfer is then Art. 6 Para. 1 Clause 1 Letter b or Letter f GDPR.
Information on third country transfers (data transfer to third countries)
We use technologies from service providers on our website whose server locations may be in third countries outside the EU or the EEA. This also includes the USA. If, as in the case of the USA, there is no adequacy decision by the EU Commission, an appropriate level of data protection must be ensured by means of other suitable guarantees. In July 2020, the ECJ ruled that the Privacy Shield agreement between the EU and the USA can no longer be used to transfer personal data to the USA. This means that the sectoral adequacy decision has been repealed.
Suitable guarantees in the form of contractually agreed standard contractual clauses of the EU Commission or binding internal data protection rules (Binding Corporate Rules) are generally possible, but require a prior review by the contracting parties as to whether an appropriate level of protection can be guaranteed. According to the ECJ ruling, it may be necessary to take additional protective measures for this purpose.
We have generally agreed to the standard data protection clauses issued by the EU Commission and still valid for the third-party technologies we use that process personal data in a third country such as the USA. Where possible, we also agree to additional guarantees to ensure that adequate data protection is guaranteed in the USA or other third countries.
Notwithstanding this, it may happen that, despite all contractual and technical measures, the level of data protection in the third country does not correspond to that of the EU. In these cases, we will ask you, if necessary, as part of the cookie consent, for your consent in accordance with Art. 49 Para. 1 lit. a GDPR to the transmission of your personal data to a third country. This applies in particular to the transmission of data to the USA.
In particular, there is a risk that US authorities may not be granted sufficiently restricted access rights to your personal data from an EU perspective, without us as the data exporter or you as the data subject noticing this and you may not have any legal remedies available to prevent this or to take action against such access.
No automated decision-making (including profiling)
We do not intend to use any personal data collected from you for any automated decision-making process (including profiling).
Change of purpose
Your personal data will only be processed for purposes other than those described if a legal provision permits this or if you have consented to the changed purpose of the data processing.
In the event of further processing for purposes other than those for which the data was originally collected, we will inform you about these other purposes before further processing and provide you with all other relevant information.
Your rights
With regard to the personal data concerning you and processed by us, you have the following rights:
Information
Right to information (Art. 15 GDPR): You are entitled at any time, within the scope of Art. 15 GDPR, to request confirmation from us as to whether we process personal data concerning you. If this is the case, you are also entitled to receive information about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of transfer to a third country, the appropriate guarantees) and a copy of your data.
Correction and deletion
Right to rectification or erasure (Articles 16 and 17 GDPR): You are entitled, in accordance with Article 16 GDPR, to request that we correct the personal data stored about you if it is inaccurate or incorrect. Furthermore, you are entitled, under the conditions of Article 17 GDPR, to request that we immediately delete personal data concerning you. You have the right to erasure in particular if the data in question is no longer necessary for the purposes of collection or processing, if the data storage period has expired, if there is an objection, or if the processing is unlawful.
Restriction of processing
Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal data under the conditions of Art. 18 GDPR.
Data portability
Right to data portability (Art. 20 GDPR): You have the right, under the conditions of Art. 20 GDPR, to request that we provide you with the personal data concerning you that you have made available to us in a structured, common and machine-readable format.
revocation
Right of withdrawal: You can withdraw your consent to the processing of personal data at any time (Article 7, paragraph 3 GDPR). This also applies to the withdrawal of consent given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the withdrawal only takes effect for the future. Processing that took place before the withdrawal is not affected. To declare the withdrawal, an informal message, e.g. by email to us, e.g. using the contact details provided in section 2, is sufficient.
Right to lodge a complaint with the data protection supervisory authority (Art. 77 GDPR)
In accordance with Art. 77 GDPR, you also have the right to complain to one of the competent data protection supervisory authorities about our processing of your personal data if you believe that we are not processing your personal data in accordance with the requirements described herein and/or applicable data protection laws.
The data protection supervisory authority in Bavaria is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Postal address:
PO Box 1349
91504 Ansbach
Phone: +49 (0) 981 180093-0
Website: https://www.lda.bayern.de/de/kontakt.html
Right to object
If we process personal data as described above to protect our legitimate interests, which predominate in the context of a balancing of interests, you can object to this processing with effect for the future (Art. 21 GDPR). If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object if there are reasons arising from your particular situation.
After exercising your right of objection, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing is carried out for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.
Changes to the privacy policy
As data protection law develops and technological or organizational changes occur, our privacy policy is regularly reviewed for any need for adjustment or addition. You will be notified of any changes, in particular on our website at https://www.kokochii.de informed.
Status: July 2022
EN 
DE