Blunk Trading Privacy Policy

Data protection

The person responsible for data processing is:
Blunk Trading GmbH
Uenzer Dorfstrasse 45
19339 Plattenburg / GT Uenze
Germany
+49 38784910101
info@blunk-trading.de

We are pleased about your interest in our internet business. Protecting your privacy is very important to us. Below we will inform you in detail about how your data is handled.

1. Access data and hosting

You can visit our website without providing any personal information. Every time a website is accessed, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offering. In accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, this serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the site.

2. Data collection and use for contract processing, contact

Your personal data is collected via Shopify or directly by us if you provide it as part of your order or when you contact us (e.g. via contact form or email). Both Shopify and we act as controllers. All data collected via Shopify is processed on the Shopify servers and passed on to us in accordance with Art. 6 Paragraph 1 Sentence 1 Letter b GDPR for contract processing or to process your contact.
Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract or to process your contact and you will not be able to complete the order or send the contact without providing it. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR to process the contract and process your inquiries. After the contract has been fully processed, your data will be restricted for further processing and deleted after any retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data in another way that is permitted by law and above which we inform you in this statement.

3. Google Analytics and Google Ads

5. Data sharing

In order to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR, we pass on your data to the shipping company commissioned with the delivery, to the extent that this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution responsible for the payment and, if applicable, the payment service provider commissioned by us, or to the selected payment service, in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies.

We use a payment service provider that is based in a country outside the European Union. Personal data will only be transmitted to this company if necessary to fulfill the contract.

If you have given us your express consent to this during or after your order, we will pass on your email address and telephone number to the selected shipping service provider in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR so that they can do so Delivery can contact you for the purpose of delivery notification or coordination.

Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

Deutsche Post/DHL
Charles-de-Gaulle-Strasse 20
53113 Bonn
Germany

Data transfer for age verification
If your order includes goods whose sale is subject to age restrictions, we will ensure that the legal minimum age is reached by querying you when you enter the site and checking your age when you hand over the package.

After the contract has been fully processed and after the tax and commercial law retention periods have expired, your data processed for this purpose will be deleted unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and beyond which we inform you in this statement.

Data transfer to debt collection companies
In order to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR, we will pass on your data to a commissioned debt collection agency if our payment claim has not been paid despite a previous reminder. In this case, the debt is collected directly by the debt collection company. In addition, the transfer serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in the effective assertion or enforcement of our payment claim in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.

6. Use of data in payment processing

Credit check and scoring when selecting PayPal purchase on account
If you have decided to purchase on account, in order to conclude the contract it is necessary that we provide the personal data necessary for processing the purchase on account and an identity and creditworthiness check in accordance with Art. 6 Paragraph 1 Sentence 1 Letter b of the GDPR Send data such as first and last name, address, date of birth and account details to PayPal. This data is transmitted so that PayPal can create an invoice and carry out an identity and creditworthiness check to process your purchase using the invoice processing method you require. Detailed information on this and the credit agencies used can be found in PayPal's data protection information.

You have the opportunity to express your point of view and contest the decision by contacting Paypal.

7. Contact options and your rights

As a data subject, you have the following rights:

• in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• in accordance with Art. 16 GDPR, you have the right to immediately request the correction of incorrect or complete personal data stored by us;
• In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is required
• to exercise the right to freedom of expression and information;
• to fulfill a legal obligation;
• for reasons of public interest or
• is necessary to assert, exercise or defend legal claims;
• in accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, to the extent that
• you dispute the accuracy of the data;
• the processing is unlawful but you object to its deletion;
• we no longer need the data, but you need it to assert, exercise or defend legal claims or
• you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
• in accordance with Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of consent given or objection to a specific use of data, please contact us directly using the contact details in our legal notice.