Data protection

The protection of your data is of major interest to us, so please read this data protection declaration carefully before using this website.

In this declaration we explain how we handle your personal data and how we use cookies. By using this website and agreeing to the following data protection declaration, you consent to Tourhafen, Mario Stramm, Mecklenburger Str. 11. 23966 Wismar (hereinafter: Tourhafen) in the processing of your personal data, taking into account the data protection laws and the following provisions, unless specific legal bases are specified in the data protection declaration.

1. General

We would like to inform you about how we handle your data, which is collected by us during your visit to our website and in particular in the context of purchase processes and what use these are subjected to in detail. In doing so, we adhere to the relevant statutory provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) and (and where applicable) the Telemedia Act (TMG). Any other data protection standards are also observed.

1.1. Responsible body

The person responsible within the meaning of the GDPR is:

Tourhafen
Mario Stramm
Mecklenburger Str. 11
23966 Wismar
Email: shop@tourhafen.de


1.2. Area restriction
Our present data protection declaration applies exclusively to our own content that is stored on our servers. The content of websites to which we or that refer to us are not recorded.

1.3. Change of privacy policy
Since our website and the underlying technologies are subject to constant change and further development, changes to this data protection declaration may also be necessary. All future changes to our privacy policy will be announced on this website. You should therefore check them regularly for innovations or changes to our data protection declaration.

1.4. Questions and hints
If you have any questions or suggestions regarding this data protection declaration during your visit to our website, you can contact us using the contact information given above (1.1).

2. Data processing

With regard to the processing of personal data, a distinction must be made between whether the data is only generated as part of a mere visit to our website by you (electronically collected data) or whether you carry out business transactions, in particular buying a product (personally collected data).

Personal data is all information that relates to an identified or identifiable natural person; A natural person is regarded as identifiable who, directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.

2.1. Data collected electronically
In principle, a simple visit to our website does not result in any data you provide to us directly. However, for technical reasons, the internet browser you are using will automatically transmit data to our web server when you access our website.

We or our commissioned web hosting provider collects data about access to the site and saves it as server log files. The following data is logged in this way:
- Visited website
- Time at the time of access
- Amount of data sent in bytes
- Source / reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymous form)

The storage in server log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing in accordance with Art. 6 Paragraph 1 lit. f GDPR.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The IP address and the information about the browser used are stored in plain text in the web server log files for a maximum of 6 weeks to identify and analyze attacks on our website.

2.1.1. Cookies
In order to make visiting our website attractive, to enable the use of certain functions and to adapt them to your interests, we use so-called cookies on various pages. These are small text files that are stored on your data carrier and that save certain settings and data for exchange with our system via your browser. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies).

Without cookies, we cannot guarantee that our website can be used correctly. The legal basis for processing personal data using technically necessary cookies is Article 6 Paragraph 1 lit. f GDPR.

You can set the browser so that you are informed about the setting of cookies and individually decide whether to accept them or exclude the acceptance of cookies for certain cases or in general. Information on how to prevent cookies can be found under "Help" in the menu bar of your browser. If you do not accept cookies, the functionality of our website may be restricted.

2.2. Personally collected data
Personal data, on the other hand, is only collected if and to the extent that you provide it to us directly, i.e. with knowledge and will disclose it to us. This is particularly the case if you register as a customer on our Internet platform, order goods or want to use certain functions of the website. The data processing is necessary for the fulfillment of the sales contract, the legal basis is Art. 6 Abs. 1 lit. b GDPR. For example, names, telephone numbers and addresses are recorded. We need this so-called inventory data in order to be able to process business transactions with you, in particular purchase transactions, from start to finish. The e-mail address is used to confirm receipt of the order and to communicate with you. We also use this for your identification when you log in. You will also receive your order and order confirmation via your email address.

We also use your email address for advertising purposes to the extent permitted by law or if you have specifically authorized us to do so.

2.2.1. Data management
Tourhafen collects, stores and processes your data for the entire processing of your order. For every customer who registers with us, password-protected access to their inventory data stored with us is set up. Here you can view the data on all orders and manage the address data. Your personal access data must be treated confidentially and must not be made accessible to unauthorized third parties. Tourhafen assumes no liability for improperly used passwords, something else applies if we are responsible for the misuse.

2.2.2. Transfer to third parties
Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of fulfilling the contract or if you have given your prior consent. As part of the order processing, for example, the service providers used by us (e.g. transporter / logistician) receive the necessary data to process the order. The data passed on in this way may only be used by our service providers to fulfill their task. Any other use of the information, for example for advertising and / or market research purposes, is not permitted and is not carried out by any of the service providers entrusted by us. Our service providers are selected to the best of our knowledge and belief.We only work with contract processors, who only work with contract processors who offer sufficient guarantees that suitable technical and organizational measures are carried out so that processing is in accordance with the Requirements of the GDPR and guarantees the protection of the rights of the data subject.
We only pass on your personal data to third parties:
if you have your according to Art. 6 Abs. 1 S. 1 lit. a GDPR have given express consent to this,
if the transfer according to Art. 6 Para. 1 S. 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that for the transfer according to Art. 6 Para. 1 S. 1 lit. c GDPR there is a legal obligation, as well as if this is legally permissible and according to Art. 6 Para. 1 S. 1 lit. b GDPR is necessary for the processing of contractual relationships with you or, according to Art. 6 Para. 1 lit f GDPR, there is a legitimate interest on our part and there is no reason to assume that you have an overriding legitimate interest in not disclosing the data.

3. Rights of data subjects

You have the right:

to revoke your consent given to us at any time in accordance with Art. 7 Para. 3 GDPR. As a result, we are no longer allowed to continue the data processing based on this consent in the future;

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a The right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;

in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;

to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;

to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you do this to assert or exercise it or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible; and

to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters.

4. Right to object

If your personal data is based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR are processed, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you would like to exercise your right of revocation or objection, an email to shop@tourhafen.de is sufficient

5. Deletion

Your personal data will be deleted, provided that tax or commercial retention obligations do not conflict with this, if the data are no longer required to fulfill the purpose for which they were stored or if their storage is not permitted for other legal reasons.