Privacy policy

Your trust in the correct handling of your data is an important prerequisite for the success of our online offer. That is why we attach great importance to data protection. The collection, processing (storage, modification, transmission, blocking and deletion) and use of your data takes place exclusively in compliance with the applicable data protection regulations, the TMG (Telemedia Act) and the BDSG (Federal Data Protection Act).

I. Use of our websites, creation of a customer account, order process, mobile apps

1. According to this, we may in particular use personal data insofar as this is necessary for the establishment and drafting of the contract, provision of services or billing (usage data). The information we receive from you will be used by us for the processing of orders, the delivery of goods and the provision of services as well as the processing of payment (in the case of purchase on account also for necessary checks).

We also use your information to communicate with you about orders, products and services, to update our records and to maintain and maintain your customer account with us and to recommend products or services that may be of interest to you.

Finally, we use your information to improve our Internet platform and our offers, to prevent or detect misuse, in particular fraud, or to enable third parties to carry out technical, logistical or other services on our behalf. Personal data is information about the identity of an individual.

When registering a customer account, the following personal data must be provided.B.
• Company name
• First name and surname
• Gender (optional)
• Street & house number
• Postal code
• City
• Country
• E-mail address
• Username
• Password

We keep log files about the access data of our users (“server log files”). With each page call by the user, his Internet browser transmits access data, which is automatically stored in our log files. However, this data (e.B. IP addresses) cannot be assigned to a specific person without further measures. A combination of this data with other data sources, in particular with the personal user data, is not carried out. The log files contain the following information:

• Remote Host (name and IP address of the computer requesting the page)
• User-Agent HTTP request header (browser, version)
• Referer or referrer
• Request-method, Request-path, Request-query-string and Request-protocol •
Date, time, time zone

We reserve the right to subsequently check the server log files via the last known IP address of such users who, on the basis of concrete facts, suspect that they are using our websites and/or our services offered in violation of the law and/or the contract.

2. Your personal data will only be used by us within ava&yves GmbH if they are either subject to this data protection declaration or follow guidelines that offer at least as much protection as this data protection declaration. We pass on personal data to other third parties exclusively to the extent described below:

• Service providers: We engage other companies and individuals to perform tasks for us, such as .B server operation, merchandise management, parcel delivery, sending letters or e-mails, maintaining customer lists, processing payments (credit card, direct debit and purchase on account) and customer service.

These service providers have access to personal data needed to perform their tasks. However, you may not use them for any other purpose. In addition, they are obliged to treat this personal data in accordance with this data protection declaration as well as the German data protection laws.

• Google Analytics: This website uses Google Analytics (Universal), a web analytics service provided by Google Inc. (“Google”). Google Analytics (Universal) uses so-called “cookies”, i.e. text files that are stored on your computer and that enable an analysis of your use of our website. The information collected in this way is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within EU member states or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and only then shortened there. On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics (Universal) will not be merged with other Google data. However, if you do not want the aforementioned analysis by means of cookies, you can prevent such cookies from being stored by setting your browser software accordingly.

You can also prevent the collection by Google Analytics (Universal) by clicking on the following link, e.B. if you cannot install a browser plug-in on your device. This sets an opt-out cookie that prevents the future collection of your data when you visit this website: Disable Google Analytics.

Further information on the terms of use and data protection of Google Analytics (Universal) can be found under http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

3. Social plugins: Our website uses so-called social plugins (“plugins”) of the social networks Facebook as well as the platforms Instagram and Pinterest. These services are provided by the companies Facebook, Instagram LLC, Pinterest Inc. and YouTube LLC (“Provider”).

> Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). An overview of Facebook’s plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

> Instagram is operated by Instagram LLC. An overview of the Instagram buttons and their appearance can be found here: https://instagram.com/developer/#

> Pinterest is operated by Pinterest Inc. An overview of the Pinterest buttons and their appearance can be found here: https://developers.pinterest.com/pin_it/

If you are logged in to one of the social networks, the providers can assign the visit to our website directly to your profile on Facebook. If you interact with the plugins, for example by pressing the “Like” button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published on the social network and displayed to your contacts.

The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for the protection of your privacy can be found in the data protection notices of the providers.

> Facebook privacy policy: http://www.facebook.com/policy.php o

> Instagram Privacy Policy: https://instagram.com/about/legal/privacy/#

> Pinterest Privacy Policy: https://about.pinterest.com/de/privacy-policy-0

If you do not want Facebook to associate the data collected via our website directly with your profile in the respective service, you must log out of the corresponding service before activating the plugins.

II. General information on data processing
Scope of processing of personal data
In principle, we collect and use personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The collection and use of personal data of our users regularly takes place only with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by law.
General legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing.
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

The data will also be deleted as soon as a user requests deletion. The user receives a confirmation of the deletion of his data.

III. Provision of the website and creation of log files
Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:

The data is stored in the log files of our system. The log files are stored for 14 days in order to potentially have the opportunity to detect any attacks
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The storage in log files takes place to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.
Duration of storage
If the data is stored in log files, this is the case after 14 days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
IV. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
Language
Items in a shopping cart
Log-in information
The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be processed together with
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.
c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
We need cookies for the following applications:
Login data (email address / username)
Shopping basket
Adoption of language settings
Remembering search terms
The user data collected by technically necessary cookies are not used to create user profiles.
These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
Duration of storage, possibility of objection and removal
Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
V. Newsletter
Description and scope of data processing
On our website it is possible to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us.

E-mail address
Username

In addition, the following data is collected during registration:

Date and time of registration

For the processing of the data, your consent will be obtained during the registration process and reference will be made to this data protection declaration.
In connection with data processing for the dispatch of newsletters, the data is not passed on to third parties. The data will be used exclusively for sending the newsletter.

Legal basis for data processing
The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR.

Purpose of data processing
The collection of the user’s e-mail address serves to deliver the newsletter.

The newsletter is sent on the basis of the user’s registration on the website:

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user’s e-mail address is therefore stored as long as the subscription to the newsletter is active.

The other personal data collected during the registration process will usually be deleted after a period of seven days.
Possibility of objection and removal
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter and on the website.

This also enables a revocation of the consent to the storage of the personal data collected during the registration process.
VI. Registration
Description and scope of data processing

As part of the registration process, the user’s consent to the processing of this data is obtained.

This is the case for those during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures if the data is no longer required for the execution of the contract. Even after conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

Possibility of objection and removal
As a user, you have the option of cancelling the registration at any time. You can have the data stored about you changed at any time.

VII. Contact form and e-mail contact
A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask is transmitted to us but not saved. This data is:

Name
E-mail address
Subject
Message

For the processing of the data, your consent will be obtained during the sending process and reference will be made to this data protection declaration. You can contact us using the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the conversation.

Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the website, including the online shop, can no longer be used. i

All personal data stored in the course of contacting us will be deleted in this case.

Name and address of the person responsible
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

ava&yves GmbH
Bahnhofstr. 120
D-33803 Steinhagen
Germany
Phone: Phone Number
E-Mail: info@avaundyves.de
Website: www.avaundyves.de

VAT ID DE 308762506

Name and address of the data protection officer
The data protection officer of the controller is:

Geraldine Koppmann-Ribbrock
ava&yves GmbH
Bahnhofstr. 120
D-33803 Steinhagen
Germany
Phone: Phone Number
E-Mail: info@avaundyves.de
Website: www.avaundyves.de

Register

Login