Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files
You can visit our websites without providing any personal information.
Each time you access our website, usage data is transmitted by your internet browser and stored in log files (server log files). This stored data includes, for example, the name of the accessed page, date and time of access, the amount of data transferred, and the requesting provider. This data serves exclusively to ensure the trouble-free operation of our website and to improve our offer. An assignment of this data to a specific person is not possible.

Your data may be transferred to third countries outside the European Union for which an adequacy decision of the European Commission exists. If there is no adequacy decision of the European Commission, data transfers are based on standard contractual clauses as suitable guarantees for the protection of personal data.

Contact

Controller
Contact us on request. The controller responsible for data processing is: Tasnim GmbH, Porschestraße 1, 63512 Hainburg, Germany, Phone: +49 1573 910 3382, Email: office@tasnim.de

Customer Initiated Contact by Email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of processing and answering your contact request. The legal basis for the processing is Art. 6(1)(f) GDPR (our legitimate interest in answering your request) or Art. 6(1)(b) GDPR if the request aims at concluding a contract. Your data will be deleted once your request has been fully processed, provided no statutory retention obligations prevent deletion.

Collection and Processing when Using the Contact Form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact. The legal basis is Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR.

WhatsApp Business
If you enter into business contact with us via WhatsApp, we use the WhatsApp Business application of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Data processing serves the purpose of communicating and processing your request. The legal basis is Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR.

Customer Account       Orders

Customer Account
When opening a customer account, we collect your personal data in the scope specified therein. Data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6(1)(a) GDPR with your consent.

Collection, Processing, and Disclosure of Personal Data during Orders
When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order as well as to handle your inquiries. The provision of data is necessary for concluding the contract. The processing is based on Art. 6(1)(b) GDPR.

Your data may be transferred to shipping companies, payment service providers, and dropshipping providers to fulfill the contract.

Reviews       Advertising

Data Collection when Writing a Comment or Review
When commenting on/reviewing a product or post, we collect your personal data (name, email address, comment text) only in the scope provided by you. The purpose is publication and moderation. The legal basis is Art. 6(1)(a) GDPR with your consent.

For the purpose of verifying your review/comment, we also collect the following data: order number, IP address, and date/time of submission.

By submitting the comment/review, you consent to the processing of the transmitted data.

When publishing your comment/review, only the name you provided will be published.

Use of Email Address for Sending Newsletters
We use your email address for sending newsletters only if you have expressly consented to this. The legal basis is Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in the newsletter.

Use of Email Address for Sending Direct Marketing
We use your email address, which we received in connection with the sale of a good or service, for the electronic transmission of advertising for our own similar goods or services. You can object to this use at any time without incurring costs other than transmission costs according to basic rates. The legal basis is § 7(3) UWG and Art. 6(1)(f) GDPR.

Shipping Service Providers

Forwarding of the Email Address to Shipping Companies for Information on Shipping Status
We pass on your email address to the transport company in the context of contract processing, provided you have expressly consented to this during the ordering process. The transfer serves the purpose of informing you about the shipping status. The processing is based on Art. 6(1)(a) GDPR.

Payment Service Providers

Use of PayPal Check-Out
We use the PayPal Checkout payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website. Data processing serves the purpose of offering you payment processing via various methods. The processing is based on Art. 6(1)(b) GDPR.

Cookies may be stored to enable browser recognition and fraud prevention. The processing is based on Art. 6(1)(f) GDPR (our legitimate interest in fraud prevention and secure payment processing).

Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal
For these payment methods, PayPal reserves the right to conduct a credit check to safeguard against default risks. The legal basis is Art. 6(1)(f) GDPR.

Third-Party Providers
When paying via a third-party payment method, the required payment data is transmitted to the respective provider:

– Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
– Google Pay (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

Purchase on Account via PayPal
When paying by invoice, the claim is assigned to PayPal. For details, please see PayPal's privacy policy.

More information on data processing when using PayPal can be found in PayPal's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of the Payment Service Provider Stripe

We use the Stripe payment service of Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland) on our website. Data processing serves the purpose of offering you payment processing. The legal basis is Art. 6(1)(b) GDPR. More information on Stripe's privacy policy is available at https://stripe.com/de/privacy.

Plug-ins and Miscellaneous

Use of Google Translate
We use the Google Translate service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website via an API. The processing serves the purpose of translating web pages for international visitors. The processing is based on Art. 6(1)(f) GDPR (our legitimate interest in an accessible international website offer).

Rights of Data Subjects and Storage Duration

Duration of Storage
After complete contract processing, the data is initially stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial retention periods, and then deleted after the expiry of the deadline, unless you have consented to further processing and use.

Rights of the Data Subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.

Right to Lodge a Complaint with the Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully.

You can lodge a complaint, among others, with the supervisory authority responsible for us:

Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden
Phone: +49 611 1408 0
Email: poststelle@datenschutz.hessen.de

Right to Object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.

If personal data processing is carried out for direct marketing purposes, you can object to this processing at any time. After the objection, the processing of the affected data for direct marketing purposes will cease.

last update: 22.10.2024