Privacy statement

The person responsible for data processing pursuant to Art. 27 Para. 1 GDPR is:

Valdemar Krog GmbH
Georgswerder Bogen 8
21109 Hamburg
info@krog.de

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Please continue reading for detailed information about our handling of your data.

1. Access data and hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically saves a server log file, containing the name of the requested file, your IP address, date and time of access, transferred data volume and the requesting provider (access data), and records the access.           

These access data are evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our services. Pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our legitimate interests in a correct presentation of our offer as part of a balancing of interests. All access data will be deleted at the latest seven days after the end of your website visit.

Hosting services by a third party provider
Within the scope of a processing procedure on our behalf, a third-party provider provides the services for hosting and displaying the website. This serves to safeguard our legitimate interests in a correct presentation of our offer within the framework of a balancing of interests. All data collected within the framework of the use of this website or in the forms provided for this purpose in the online shop as described below will be processed on the online shop‘s servers. Processing on other servers only takes place within the framework described here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data collection and use for the execution of the contract

We collect personal data when you provide us with them voluntarily in connection with your order or when you contact us (e.g. via contact form or e-mail). Mandatory fields are marked as such, because in these cases we need the data to process the contract or to process your contact and you cannot send the order or contact without providing this information. What data are collected can be seen from the respective input forms. We use the data provided by you pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR to process contracts and your enquiries. If you have given your consent to this in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. After complete conclusion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted at the end of the tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to use more data, as permitted by law and about which we inform you in this statement. The deletion of your customer account is possible at any time and can take place either by a message to the contact described below or through a specific function in your customer account.

3. Data transfer

In order to fulfil the contract pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institution and payment service provider commissioned by us or to the selected payment service in order to process payments. In some cases, the selected payment service providers also collect these data themselves if you create an account with them. In this case, you must register with the payment service provider using your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider shall apply.

Data transfer to shipping service providers
If you have given us your express consent to this during or after your order, we will forward your telephone number to the selected shipping service provider in compliance with Art. 6 Para. 1 S. 1 lit. a GDPR so that the latter can contact you before delivery for the purpose of notification or coordination of delivery.

The consent can be revoked at any time by sending a message to the contact described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data unless you have expressly consented to a further use of your data or unless we reserve the right to use data beyond this, as is permitted by law and about which we inform you in this declaration.

Dachser GmbH & Co. KG
Wilhelm-Iwan-Ring 21
21035 Hamburg
Germany


Börje Jönsson Spedition GmbH
Rungedamm 31
21035 Hamburg
Germany

4. E-mail newsletter

E-mail advertising with subscription to the newsletter
If you subscribe to our newsletter, we will use the data required for this or provided separately by you in order to send you our e-mail newsletter regularly on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time; this can be done either by sending a message to the contact described below or via a link provided for this purpose in the newsletter. After you unsubscribe, we will delete your e-mail address unless you have expressly consented to the further use of your data or unless we reserve the right to use further data as permitted by law and about which we inform you in this declaration.

The newsletter is sent as part of a processing order on our behalf by a service provider, to which we pass on your email address.

This service provider is located within a country of the European Union or the European Economic Area.

 

5. Use of data for payment processing

Credit assessment         
If we make an advance payment, e.g. in the case of a purchase on account, Art. 22 Para. 2 lit. a GDPR requires us to obtain identity and credit information from specialised service providers (credit agencies) in order to conclude the contract. For this purpose, we transmit your personal data as required for a credit assessment to the following company(s):

Creditreform Boniversum GmbH
Hellersbergstraße 11
41460 Neuss
Germany

Deutsche Bank Private and Business Clients AG
Sachsenstrasse 11
20097 Hamburg
Germany

Appropriate measures to protect your rights, freedoms and legitimate interests will be taken into account. By contacting the contact specified below, you have the possibility of stating your point of view and challenging the decision. After the contract has been completed in full, your data processed for this purpose will be deleted unless you have expressly consented to the further use of your data or unless we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this declaration.

6. Integration of the Trusted Shop Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and the collected reviews as well as to offer Trusted Shops products to buyers after an order.

This serves to safeguard our predominantly legitimate interests in an optimal marketing of our offer within the framework of a weighing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the services thus advertised are provided by Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Koeln.            
When the trustbadge is called up, the web server automatically saves a server log file that contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data), and it documents the call. These access data are not evaluated and are automatically overwritten at the latest seven days after the end of your website visit.      

Further personal data will only be transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement made between you and Trusted Shops applies.

For this an automatic collection of personal data from the order data takes place. Whether you as a buyer are already registered for a product use is automatically checked on the basis of a neutral parameter, the e-mail address hashed by cryptological one-way function. The e-mail address is converted to this hash value, which cannot be decrypted for Trusted Shops, before transmission. After checking for a match, the parameter is automatically deleted.

This is necessary for the fulfilment of our and Trusted Shops' predominantly legitimate interests in the provision of the buyer protection linked to the specific order and the transactional valuation services in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. Further details, including objections, can be found in the Trusted Shops data protection declaration linked above and in the Trustbadge.

7. Cookies and web analysis

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for the purposes of market research, we use cookies on various pages. This serves to safeguard our predominantly legitimate interests in an optimised presentation of our offer within the framework of a weighing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (session cookies). Other cookies remain on your end device and enable us to recognise your browser during your next visit (persistent cookies). You can find the duration of the storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera™ : https://help.opera.com/en/latest/web-preferences/#cookies

If cookies are not accepted, the functionality of our website may be restricted.

Use of Google (Universal) Analytics for web analytics
For web page analysis, this website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.de). This serves to safeguard our predominantly legitimate interests in an optimised presentation of our offer within the framework of a weighing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Google (Universal) Analytics uses methods that allow an analysis of the use of the website by you, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there.

By activating IP anonymisation on this website, the IP address is shortened prior to transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected in this context will be deleted after the purpose and end of the use of Google Analytics by us.

Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available from the following link: http://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data from this website in the future. An opt-out cookie is stored on your end device. If you delete your cookies, you must click the link again.

8. Online marketing

Google Ads Remarketing
We advertise this website in Google search results and on third-party websites using Google Ads. When you visit our website, a remarketing cookie is placed by Google that automatically enables interest-based advertising by means of a pseudonymous cookie ID and based on the pages you visit. This serves to safeguard our predominantly legitimate interests in an optimal marketing of our offer within the framework of a weighing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The data collected in this context will be deleted after the purpose and end of the use of Google Ads Remarketing by us.

Additional data processing will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize ads you see on the web. In this case, if you are logged in to Google during your visit to our website, Google will use your information in conjunction with Google Analytics data to create and define target audience lists for cross-device remarketing. Google will temporarily link your personal data with Google Analytics data in order to form target groups.

Google Ads Remarketing is a service provided by Google LLC (www.google.de).
The Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link. You can also contact the Digital Advertising Alliance to find out about the use of cookies and to configure your settings.

Google reCAPTCHA
For the purpose of protection against misuse of our web forms and against spam, we use the Google reCAPTCHA service within the framework of some forms on this website. Google reCAPTCHA is an offer by Google Ireland Limited, a company incorporated and operated under the laws of Ireland and with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). By checking a manual entry, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. In accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO, this serves to safeguard our legitimate interests, which are predominant in the weighing of interests, in the protection of our website against misuse and in a trouble-free presentation of our online presence.
Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, to check the methods that allow an analysis of the use of the website by you, such as cookies. The automatically collected information about your use of this website, including your IP address, will generally be transmitted to and stored by Google on servers in the United States. In addition, other cookies stored in your browser by Google services are evaluated by Google reCAPTCHA.
A reading or saving of personal data from the input fields of the respective form does not take place.
Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You can prevent Google from collecting the data (including your IP address) generated by JavaScript or the cookie and related to your use of the website and from processing this data by Google by setting your browser settings to prevent the execution of JavaScript or the setting of cookies. Please note that this may limit the functionality of our website for your use.
More information about Google's privacy policy can be found here.

9. Sending of reminders via e-mail

Review reminder by Trusted Shops
If you have given us your express consent to this during or after your order in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, we will pass your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Koeln (www.trustedshops.de) so that they can send you a review reminder by e-mail.

This consent can be revoked at any time by sending a message to the contact described below or directly to Trusted Shops.

10. Contacts and your rights

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;
  • pursuant to Art. 16 GDPR, you have the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
  • in accordance with Art. 17 GDPR, you have the right to demand the deletion of your personal data stored by us, unless further processing is necessary     -
     - to exercise the right to freedom of expression and information;
     - to fulfil a legal obligation;        
     - for reasons of public interest or-            
    - to assert, exercise or defend legal claims;
  • pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data insofar as            
     - the accuracy of the data is disputed by you;     
     - the processing is unlawful, but you refuse to delete it; 
     - we no longer need the data, but you need it to assert, exercise or defend legal claims or                -
     - you have lodged an objection to the processing pursuant to Art. 21 GDPR;
  • Pursuant to Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible party;
  • the right to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.


If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of consents given or objection to a specific use of data, please contact us directly via the contact data in our legal information.

Right of objection          
If we process personal data as explained above in order to safeguard our legitimate interests, which are predominant in the weighing of interests, you can object to this processing with effect for the future. If the data are processed for direct marketing purposes, you may exercise this right at any time as described above. Insofar your data are processed for other purposes, you are only entitled to object for reasons arising from your particular situation.            

After you have exercised your right of objection, we will not process your personal data further for these purposes unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.

This does not apply if the data are processed for the purposes of direct marketing. Then we will not process your personal data any further for this purpose.