Privacy
-------------------------------------------------- -------------------
Privacy statement in accordance with the General Data Protection Regulation
-------------------------------------------------- -------------------
1) Information about the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The person responsible for data processing on this website according to the General Data Protection Regulation (GDPR) is Tanja Damhof-Wohlsperger, Toys42hands, De Oplang 16, 9472ZC Zuidlaren, Niederlande, Tel.: 0031505893727, E-Mail: info@toys42hands.nl. The controller of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL and TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests that you send to the controller). You can recognize a locked connection by the string 'https://' and the lock icon in your browser's address bar.
2) Data collection when visiting our website
When using our website purely for information purposes, i.e. when you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called server logs). When you visit our website, we collect the following data, which is technically necessary to display our website for you:
- Which of our websites you visit
- Date and time of the visit
- Transmitted data volume in bytes
- From which internet page you arrived at the website
- Browser used
- Operating system used
- IP address used (possibly anonymized)
The processing takes place in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for other purposes. However, we reserve the right to check the server logs subsequently if there are concrete indications that indicate unlawful use.
3) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your computer system. Some cookies we use are deleted after the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your computer and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are placed, they collect and process personal user information, such as browser and location data, and IP addresses. Permanent cookies are automatically deleted after a certain period of time. This period may differ per cookie.
The cookies are partly used to simplify the ordering process by saving settings (for example by remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed via specific cookies from us, this is done in accordance with Article 6 (1) (b) GDPR for the performance of the contract or in accordance with Article 6 (1) (f) GDPR to protect our legitimate interests in the optimal functioning of the website and creating a customer-friendly and effective experience of the website visit.
We work with advertising partners who help us make our internet offering as interesting as possible for you. To this end, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of the specific information collected in the points below.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept cookies or whether to refuse them in certain cases or in general. Each browser manages cookie settings differently. This is described in the Help menu of each browser, which explains how to change your cookie settings. You can find this information for the respective browser via the following links:
Internet Explorer: https://https://support.microsoft.com/nl-nl/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/nl/kb/cookies-remove-data-wisen-websites-saved
Chrome: https://support.google.com/chrome/answer/95647?hl=nl&hlrm=en
Safari: https://support.apple.com/nl-nl/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/
Please note that certain functions of our website can only be used to a limited extent if the placing of cookies is refused.
4) Contact
If you contact us (for example via a contact form or e-mail), personal data will be collected. Which data is collected when using a contact form can be seen from the relevant contact form. This data is stored and used exclusively for answering your request or for making contact and the associated technical administration. The legal basis for the data processing is our legitimate interest in responding to your request in accordance with Article 6 (1) (f) GDPR. If you contact us to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) GDPR. Your data will be deleted after completing your request. This happens when the circumstances show that the matter in question has been finally settled and on the condition that no legal registration obligations apply.
5) Data processing when creating a customer account and for the execution of contracts
In accordance with Article 6 (1) (b) GDPR, personal data is also collected and processed when you provide it to us for the performance of a contract or when creating a customer account. Which data is collected is apparent from the relevant input forms. You can delete your customer account at any time. This can be done by sending a message to the controller mentioned above. We store the data you provide and use it for the execution of agreements. After the complete processing of a contract or the deletion of your customer account, your data will be blocked for the purposes of tax and commercial law retention periods and deleted after these periods unless you have expressly consented to further use of your data or the we are permitted to continue to use the data in a manner that is legally permitted and about which we will inform you below.
6) Use of your data for direct marketing
If you sign up for our email newsletter, we will regularly send you information about our offers. To receive the newsletter, only your email address (required) must be provided. Providing any additional information is on a voluntary basis and is intended to address you personally. We use the so-called 'double-opt-in' procedure to send the newsletter. This means that we will only send you an e-mail newsletter after you have expressly consented to the sending of newsletters. We will then send you an email asking you to confirm that you wish to receive newsletters in the future by clicking on the relevant link.
By activating the confirmation link, you consent to us using your personal data in accordance with Article 6 (1) (a) GDPR. When you register for the newsletter, we store the IP address registered by your internet service provider (ISP) and the date and time of registration in order to subsequently detect possible misuse of your e-mail address. The data we collect when registering for the newsletter will only be used to distribute advertising communications via the newsletter. You can unsubscribe from the newsletter at any time via the corresponding link in the newsletter or by sending a message to the above-mentioned controller. After cancellation, your e-mail address will be immediately deleted from our database of newsletter recipients, if you have not expressly consented to further use of your data or if we reserve the right to continue using the data in a manner that is legally permitted and for which we inform you in this statement.
7) Data processing for order processing
7.1 The personal data collected by us will be passed on to the transport company responsible for delivery in the context of the execution of the contract, insofar as this is necessary for delivery of the goods. We pass on your payment data to the responsible credit institution in the context of payment processing, to the extent necessary. To the extent that payment service providers are used, we will expressly inform you about this in the following. The legal basis for providing the data in this case is Article 6(1)(b) GDPR.
7.2 To fulfill our contractual obligations towards our customers, we work with external shipping partners. Your name and delivery address will be passed on by us in accordance with Article 6 (1) (b) GDPR exclusively for the purpose of delivering goods to a shipping partner of our choice.
7.3 Use of payment service providers (payment providers)
- Paypal
When paying with PayPal – purchase by credit card via PayPal, direct debit via PayPal or, if offered, 'purchase on account' or 'installment payment' via PayPal as payment methods – we transfer your payment data to PayPal (Europe) as part of payment processing Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter 'PayPal'). This transfer takes place in accordance with Article 6 (1) (b) GDPR and only if this is necessary for payment processing.
PayPal reserves the right to carry out a credit check when purchasing by credit card via PayPal, direct debit via PayPal or - if offered - 'purchase on account' or 'installment payment' via PayPal as payment methods. To this end, your payment data will, where appropriate, be passed on to credit agencies in accordance with Article 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. The result of the credit analysis regarding the statistical probability of default is used by PayPal for decisions about the provision of the respective payment method. The creditworthiness information may include probability values (so-called score values). To the extent that score values are included in the creditworthiness check, they have been calculated on the basis of scientifically recognized mathematical-statistical procedures. The calculation of the score values includes, but is not limited to, address information. Additional information regarding data protection, including the credit bureaus used, can be found in PayPal's privacy statement: https://www.paypal.com/nl/webapps/mpp/ua/privacy-full?locale.x=nl_NL
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal reserves the right, where appropriate, to process your personal data if this is necessary to comply with the contractual provisions for processing payments.
- SOFORT
If you select the payment method “SOFORT”, payment is processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter: “SOFORT”), to which we provide the information communicated to us in the context of your order together with information about submit your order in accordance with art. 6 (1) (b) GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is passed on exclusively for the purpose of having your payment processed by SOFORT and only to the extent necessary for this. You can read more about SOFORT's data protection declaration at the Internet address below:
https://www.klarna.com/sofort/datenschutz
8) Use of videos
Use of YouTube videos
This website uses the YouTube embedding function to display and display videos from the provider "YouTube", which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
In this context, the "extended data protection mode" is used, whereby, according to the provider, the storage of user information is only initiated when the video or videos are played. When the display of embedded YouTube videos is started, the provider enables "YouTube" cookies to collect information about user behavior. According to the information from 'YouTube', these serve, among other things, to compile video statistics, improve user-friendliness and prevent unlawful activities. If you are logged in to Google, your data will be linked directly to your account when you click on a video. If you want to prevent your profile from being linked to YouTube, you must log out before activating the button. Google stores your data (even if you are not logged in) as usage profiles and analyzes it. Such an analysis is carried out in particular in accordance with Article 6 (1) (f) GDPR on the basis of Google's legitimate interest in displaying personalized advertising, market research and/or tailoring its website to needs. You have the right to object to this usage profiling and must contact YouTube to exercise this right. When using YouTube, personal data is also transferred to the server of Google LLC. possible in the US.
Regardless of the display of embedded videos, each time you visit this website, a connection is made to the Google network "DoubleClick", which may lead to further data processing without our influence.
Further information about data protection at 'YouTube' can be found in the provider's privacy statement at: www.google.com/policies/privacy/
To the extent required by law, we have obtained your consent to the processing of your data as described above in accordance with Article 6 (1) (a) GDPR. You can withdraw your consent at any time and with immediate effect. To exercise your right of withdrawal, please follow the procedure described above.
9) Rights of the data subject
9.1 Within the meaning of the applicable data protection legislation, you as a data subject have extensive data protection rights (information and intervention rights) vis-à-vis the controller of your personal data, which we inform you about below:
- Right of access in accordance with Article 15 GDPR;
- Right to rectification in accordance with Article 16 GDPR;
- Right to erasure according to Article 17 GDPR;
- Right to restriction of processing in accordance with Article 18 GDPR;
- Right to notice in accordance with Article 19 GDPR;
- Right to data portability in accordance with Article 20 GDPR;
- Right to withdraw consent according to Article 7(3) GDPR;
- Right to file a complaint under Article 77 GDPR.
9.2 RIGHT TO OBJECT
WHEN WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERALL LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON REASONS RELATED TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU WITH CONSEQUENCES FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE REMAIN RESERVED TO CONTINUE PROCESSING DATA WHEN WE CAN PROVIDE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERWEIGHT THE INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS OF THE DATA CONTROLLER OR WHICH ARE RELATED TO THE ESTABLISHMENT, EXERCISE OR SUBSTANCE OF A LEGAL CLAIM.
WHEN YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL DISCONTINUE PROCESSING THE DATA IN QUESTION FOR THESE PURPOSES.
10) Duration of storage of personal data
The duration of storage of personal data is determined on the basis of the respective statutory retention period (e.g. tax and commercial law retention periods). After expiry of the period, the data to be taken into account will be systematically deleted if they are no longer necessary for the execution or preparation of a contract and we have no legitimate interest in continued storage.