DATA PROTECTION

We use the information collected about you exclusively to process the orders you place and to ensure a straightforward and seamless shopping experience in our online store. All private data you provide to us is used solely for your order process and is protected. Our data protection practices comply with federal and telemedia laws.

What data do we need and what do we do with it?

For shopping in our online store, we require some information from you: your full name, billing and, if applicable, shipping address (street, postal code, city, country), telephone number, your email address, which will also serve as your username (shop login), and your chosen password. The access data (email address and password) are needed for logging into the shop – the personal data of your address is a prerequisite for processing your orders. The telephone number will be used for quick contact in case of inquiries.

Additionally, we offer you the option to register as a regular customer. If you later decide not to take advantage of the services anymore, you can object at any time. Just get in touch with us.

In order to process and deliver your order, we only pass on your data to the shipping service entrusted with the delivery.

These data ensure that we can process your order and keep you informed via email. You will receive an email for each process (e.g., receipt of the order, advance payment, parcel number, etc.), which will also inform you about the order status.

Upon request, we will provide you with information free of charge about the data stored about you. If you wish, please send a message via our contact page. Likewise, we are obligated to correct, block, or delete the data stored about you upon request.

How are your personal data protected?

To protect your data, we use SSL transmission (Secure Socket Layer) on all websites that transfer personal data. This method encrypts the data before it is transmitted over the Internet. This encryption makes it impossible for third parties to view your data. Therefore, the following pages are explicitly protected with SSL encryption: customer login, new registration, password change, change of delivery address, and the complete order process.

Why "Cookies"?

A "cookie" is a small data file transferred by us to your computer when you browse our site. A cookie can only contain information that we send to your computer – it cannot read private data. If you accept cookies on our site, we do not have access to your personal information, but with the help of cookies, we can identify your computer.

Cookies help us identify you as a customer and ensure a smooth process for your order. You can choose whether the cookie should be written permanently (function "stay logged in") or expire after you finish your purchase. The cookies require only minimal storage space, do not affect the functioning of your computer in any way, and do not contain any personally identifiable data.

Responsible for data processing is: Daniel Bär Grünstr. 12 79232 March Germany

info@sodabaer.de

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal information. When you access a webpage, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the access.

This access data is evaluated exclusively for the purpose of ensuring a trouble-free operation of the site and improving our offer. This serves according to Art. 6 para. 1 p. 1 lit. f DSGVO to safeguard our predominantly legitimate interests in a correct presentation of our offer within the scope of a balancing of interests. All access data is deleted at the latest seven days after the end of your page visit.

Hosting services by a third-party provider As part of processing on our behalf, a third-party provider provides us with hosting and website display services. All data collected as part of the use of this website or in forms provided for this purpose in the online shop, as described below, is processed on its servers. Processing on other servers only takes place within the framework explained here.

This service provider is located within a country of the European Union or the European Economic Area.

2.Data collection and use for contract processing, contact, and when opening a customer account

We collect personal data if you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases we require the data to process the contract or to process your contact request, and you cannot send the order or contact request without providing it. The data collected can be seen from the respective input forms. We use the data provided by you to process the contract and handle your inquiries in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO. If you have given your consent to this in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO by deciding to open a customer account, we will use your data for the purpose of opening a customer account. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

3. Data transfer

For the fulfillment of the contract in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.

4. Contact options and your rights

As a data subject, you have the following rights:

in accordance with Art. 15 DSGVO, the right to request information about your personal data processed by us to the extent specified therein;
in accordance with Art. 16 DSGVO, the right to demand the correction of inaccurate or incomplete personal data stored by us without undue delay;
in accordance with Art. 17 DSGVO, the right to demand the deletion of your personal data stored by us, unless further processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise, or defense of legal claims;
in accordance with Art. 18 DSGVO, the right to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer require the data, but you require it for the assertion, exercise, or defense of legal claims, or you have objected to the processing in accordance with Art. 21 DSGVO;
in accordance with Art. 20 DSGVO, the right to receive your personal data that you have provided to us in a structured, common, and machine-readable format or to request its transfer to another controller;
in accordance with Art. 7 para. 3 DSGVO, the right to revoke your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future;
in accordance with Art. 77 DSGVO, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

If you have any questions about the collection, processing, or use of your personal data, information, correction, blocking, or deletion of data, and revocation of consent given or objection to a specific use of data, please contact us directly via the contact details in our imprint.

Right to Object

To the extent that we process personal data as explained above in order to safeguard our overriding legitimate interests within the scope of a balancing of interests, you have the right to object to this processing with effect for the future. If the processing is carried out for purposes of direct marketing, you can exercise this right at any time as described above. To the extent that the processing is carried out for other purposes, you have the right to object only if there are reasons arising from your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

This does not apply if the processing is for purposes of direct marketing. In this case, we will no longer process your personal data for this purpose.