PRIVACY POLICY
SKÒG takes the protection of personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. In the following, we would like to inform you about our handling of personal data.
1. Responsible entity
The controller responsible for data processing on this website is Skog UG (haftungsbeschränkt) i.G., Bruckstraße 17, 72488 Sigmaringen, Germany, e-mail: hello@skog-world.com.
2. Encryption
We use SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
3. Collection and Storage of personal data
(1) When you visit our website
When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted after a maximum of [...] months: Date and time of access, amount of data transferred in bytes, origin or reference that led to the page, browser used, operating system used and IP address used. The aforementioned data is processed by us for the following purposes: Ensuring a smooth connection to the website, ensuring convenient use of our website, evaluating system security and stability and for other administrative purposes. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. We also use cookies and analysis services when you visit our website. You will find more detailed explanations on this in this privacy policy.
(2) When using our contact form, contacting us by e-mail
We offer you the option to contact us using the contact-forms provided on the website. You must provide your name and e-mail address so that we know who sent the request and can respond to it. You can enter further information in the contact form, which will then also be recorded, stored and transmitted with your contact request so that we can answer your request in the best possible way. If you send us an e-mail, the following data will be collected and stored: [Please complete].
(3) Cookies
To enhance your experience on our website and enable specific functionalities, we employ what are known as cookies on various pages. These are diminutive text files that get stored on your device. Some of these cookies are deleted once your browser session concludes, meaning when you close your browser (these are referred to as session cookies). Conversely, others persist on your device and grant us, or our partner companies (referred to as third-party cookies), the capacity to recognize your browser during your next visit (these are known as persistent cookies). When cookies are in use, they gather and process distinct user data, such as browser and location information, as well as individual IP address values. Persistent cookies are automatically removed after a specified duration, the length of which varies depending on the particular cookie. You can review the duration of each cookies storage in your web browser's cookie settings overview. In some instances, cookies serve to streamline the order process by saving settings (e.g., retaining the contents of a virtual shopping cart for a subsequent website visit). When personal data is processed via specific cookies set by us, the processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO either for contract execution or in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO to uphold our legitimate interests in optimizing website functionality and creating a user- friendly, effective webpage experience. We collaborate with advertising partners who assist us in making our website more engaging for you. In pursuit of this objective, cookies from partner companies are also stored on your hard drive when you visit our website (these are known as third-party cookies). Specific information about the usage of these cookies and the extent of the data collection in each case will be provided to you individually and separately in the following sections. Please be aware that you have the option to configure your browser to receive notifications about cookie settings and independently decide whether to accept them or exclude their acceptance in particular instances or entirely. The management of cookie settings varies according to each browser, and you can find details on how to modify your cookie settings in the help menu of your specific browser. Information on this can be found in the respective browser links provided below:
- Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac.
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies.
- Firefox: https://www.mozilla.org/en-US/privacy/websites/#cookies.
- Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktophl=en .
Please note that the functionality of our website may be limited if cookies are not accepted.
(4) Data Processing When Creating a Customer Account and for Contract Execution In compliance with Art. 6 para. 1 sentence 1 lit. b DSGVO, personal data will continue to be collected and processed when you provide it for the execution of a contract or when opening a customer account. The particulars of what data is collected can be ascertained from the respective input forms. You can delete your customer account at any time by sending a message to the controller's address mentioned above. We store and use the data provided by you for contract execution. Following the complete execution of the contract or the deletion of your customer account, your data will be locked in consideration of tax and commercial retention periods and will be deleted after the expiration of these periods, unless you have explicitly consented to further data usage or if a legally permissible retention of data beyond this period is provided for on our end, as we will duly inform you about below.
(5) Utilization of Client Data for Direct Advertising
When you subscribe to our email newsletter, we will regularly furnish you with information about our offers. The sole mandatory information for newsletter dispatch is your email address. The provision of additional potential data is voluntary and aids in personalizing our communication. We employ the double opt-in procedure for sending newsletters, meaning that we will not send you an email newsletter unless you have explicitly confirmed that you consent to receiving it. You will then be sent a confirmation email containing a request to affirm your desire to receive future newsletters by clicking on an designated link. By activating the confirmation link, you grant us consent to utilize your personal data in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO. Your registration for the newsletter will result in us storing your IP address, provided by your Internet Service Provider (ISP), along with the registration date and time. This data is retained to detect any potential misuse of your email address in the future. The information we collect during your newsletter registration is exclusively employed for promotional purposes through the newsletter. At any time, you can unsubscribe from the newsletter using the designated link within the newsletter or by sending a message to the responsible party mentioned at the outset. Following your cancellation, your email address will be promptly excised from our newsletter distribution list, unless you have expressly consented to further data usage or if we retain the right to utilize data beyond that, as permitted by law, and as we will duly inform you in this declaration. If you've shared your email address with us during product purchases, we reserve the right to periodically send you offers via email for products similar to those you've previously purchased. According to § 7 (3) of the German law against unfair competition (UWG), we are not obliged to acquire separate consent from you for this purpose. This data processing is solely grounded in our legitimate interest for personalized direct advertising, pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO. If you initially object to the use of your email address for this purpose, we will refrain from sending you any emails. You have the right to object to the future utilization of your email address for the advertising purpose outlined above at any time by notifying the controller mentioned at the beginning of this document. In this regard, you are only liable for the standard transmission costs. Once your objection is received, the use of your email address for the purposes of advertising will be discontinued without delay. Our email newsletters are distributed through the technical service provider, The Rocket Science Group, LLC, doing business as MailChimp, with offices at 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (https://mailchimp.com). We share the information you provided during newsletter registration with them. This sharing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO and is aligned with our legitimate interest in using an efficient, secure, and user-friendly newsletter system. Kindly note that your data is generally transferred to a MailChimp server in the United States and stored there. MailChimp utilizes this data for the distribution and statistical assessment of the newsletter on our behalf. For evaluation purposes, the sent emails contain web beacons or tracking pixels, which are single-pixel image files hosted on our website. This mechanism allows us to discern whether a newsletter message has been opened and which links were clicked. Additionally, it captures technical information (e.g., time of retrieval, IP address, browser type, and operating system). This data is collected exclusively in pseudonymous form and is not linked to other personal data about you. A direct personal connection is excluded. This data is exclusively used for statistical analysis of newsletter campaigns, with the outcomes aiding us in shaping future newsletters to better align with recipient interests. Should you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter. Furthermore, MailChimp may use this data under Art. 6 para. 1 sentence 1 lit. f DSGVO based on its own legitimate interest in customizing and optimizing the service to meet demand and for market research, such as ascertaining the geographical origin of recipients. However, MailChimp does not use the data of our newsletter recipients to contact them directly or share it with third parties. To protect your data in the United States, we have established a data processing agreement (Data Processing Agreement) with MailChimp based on the standard contractual clauses of the European Commission, facilitating the transmission of your personal data to MailChimp. If you are interested in reviewing this data processing agreement, you can find it at the following link: https://mailchimp.com/legal/data-processing-addendum/ .
You can view MailChimp's privacy policy at: https://mailchimp.com/legal/privacy/ .
(6) Email Notification of Product Availability If our online store furnishes the option to notify you by email about the availability of selected, temporarily unavailable merchandise, you can subscribe to our email notification service for product availability. By registering for this service, we will send you a one-time email regarding the availability of the specific item you've chosen. The only mandatory information required to send this notification is your email address. The provision of additional data is optional and enables us to personalize our communication with you. We employ the double opt-in process for sending these notifications, meaning we will only send you a notification once you've expressly confirmed your desire to receive it. You will then receive a confirmation email asking you to click on a link to confirm your wish to receive such notifications. By clicking the confirmation link, you provide your consent to the use of your personal data in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO. Once you opt-in to our email notification service for product availability, we store your IP address, as submitted by your internet service provider (ISP), along with the date and time of enrollment. This is done to help detect any potential misuse of your email address at a later date. The data collected when you register for our email notification service regarding goods availability is exclusively used to inform you about the availability of a particular item in our online shop. You can unsubscribe from the email notification service for product availability at any time by sending a corresponding message to the data processing controller mentioned at the beginning. After unsubscribing, your email address will be immediately removed from our distribution list, barring your expressed consent to further data usage, or unless we retain the right to continue using your data as allowed by law, details of which will be provided in this declaration.
(7) Data Processing for Order Fulfillment
The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will share your payment data with the authorized financial institution for the purpose of processing payments if it is required for payment processing. In cases where payment service providers are used, we will explicitly inform you of this below. The legal basis for data transfer is Art. 6 para. 1 sentence 1 lit. b DSGVO.
(8) Disclosure of Personal Data to Shipping Service Providers We engage the following transportation service providers:
- Deutsche Post AG, located at Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany. In compliance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we transmit your email address and/or telephone number to the provider before delivering the goods, for the purpose of scheduling a delivery date or sending delivery notifications, provided you have expressly granted your consent during the ordering process. Otherwise, we share solely the recipient's name and delivery address with the supplier, for the purpose of delivery, in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO. This transmission occurs only to the extent necessary for the delivery of the goods. In such cases, advanced coordination of the delivery date with the supplier or notification of delivery is not feasible. At any time, consent can be revoked, with future effect, either to the responsible party mentioned above or to the provider.
- DHL, located at Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
In compliance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we transmit your email address and/or telephone number to the provider before delivering the goods, for the purpose of scheduling a delivery date or sending delivery notifications, provided you have expressly granted your consent during the ordering process. Otherwise, we share solely the recipient's name and delivery address with the supplier, for the purpose of delivery, in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO. This transmission occurs only to the extent necessary for the delivery of the goods. In such cases, advanced coordination of the delivery date with the supplier or notification of delivery is not feasible. At any time, consent can be revoked, with future effect, either to the responsible party mentioned above or to the provider.
- DHL Express Germany GmbH, located at Heinrich-Brüning-Str. 5, 53113 Bonn, Germany. In compliance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we transmit your email address and/or telephone number to the provider before delivering the goods, for the purpose of scheduling a delivery date or sending delivery notifications, provided you have expressly granted your consent during the ordering process. Otherwise, we share solely the recipient's name and delivery address with the supplier, for the purpose of delivery, in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO. This transmission occurs only to the extent necessary for the delivery of the goods. In such cases, advanced coordination of the delivery date with the supplier or notification of delivery is not feasible. At any time, consent can be revoked, with future effect, either to the responsible party mentioned above or to the provider.
(9) Utilization of Payment Service Providers
- Apple Pay
If you opt for the Apple Pay payment method offered by Apple Distribution International (Apple), with a registered address at Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is executed through your iOS, watchOS, or macOS device's Apple Pay functionality. This entails debiting a payment card linked to Apple Pay. Apple Pay leverages security features integrated into your device's hardware and software to safeguard your transactions. To authorize a payment, you must input a pre-defined code and verify it through the Face ID or Touch ID feature on your device. For payment processing, the details you provide during the order placement, along with order-specific information, are transmitted to Apple in an encrypted format. Subsequently, Apple further encrypts this data with a developer-specific key before conveying it to the payment service provider associated with the payment card stored in Apple Pay for payment processing. This encryption guarantees that only the originating website can access the payment information. After payment completion, Apple dispatches your device account number and a unique transaction-specific dynamic security code to the originating website to verify the payment. If personal data is processed in these transmissions, the processing solely serves the purpose of payment processing, as stipulated by Art. 6 para. 1 sentence 1 lit. b DSGVO. Apple retains anonymized transaction data, encompassing approximate purchase amounts, dates, times, and transaction success status. This anonymization completely eliminates any personal association. Apple employs this anonymized data for enhancing Apple Pay and other Apple products and services. When using Apple Pay on iPhone or the Apple Watch to finalize a purchase conducted via Safari on Mac, your Mac and the authorization device exchange information through an encrypted channel on Apple's servers. Apple neither processes nor retains this information in a format allowing personal identification. You can disable the ability to use Apple Pay on your Mac through your iPhone settings. First, access Wallet Apple Pay and then disable Allow payments on Mac.
For more information regarding Apple Pay privacy, please visit the following web address:
https://support.apple.com/en-gb/HT203027 .
- Google Pay
If you opt for the Google Pay payment method provided by Google Ireland Limited, with a registered address at Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google), payment processing is facilitated through the Google Pay application on your Android device, running at least Android 4.4 (KitKat) with NFC capability. This process involves charging a payment card registered in Google Pay or a verified payment system (e.g. PayPal). For transactions exceeding € 25,00, prior unlocking of your mobile device is required, which is subject to the respective verification method (e.g., face recognition, password, fingerprint, or pattern). For payment processing, the details you provide during the order placement, alongside order specific information, are forwarded to Google. Google subsequently transmits your payment information stored in Google Pay as a unique transaction number to the source website, enabling payment verification. This transaction number does not include any information related to the actual payment data of your payment method registered with Google Pay; it is generated and transmitted as a uniquely valid numeric token. In all transactions via Google Pay, Google serves as an intermediary exclusively to process the payment transaction. The transaction occurs solely between the user and the source website, involving the debiting of the payment method registered with Google Pay. If personal data is processed in the mentioned transmissions, the processing serves solely the purpose of payment processing in compliance with Art. 6 para. 1 sentence 1 lit. b DSGVO. Google maintains the right to compile, store, and assess specific transaction-related data for each Google Pay transaction.. This data encompasses transaction dates, times, amounts, the merchant's location and description, the description provided by the merchant of the purchased goods or services, attached photos, the seller and buyer or sender and recipient's names and email addresses, the payment method used, your description of the transaction's purpose, and, if applicable, the transaction-associated offer. According to Google, this processing is performed exclusively in compliance with Art. 6 Para. 1 lit. f DSGVO, founded on the legitimate interest in accurate accounting, transaction data verification, and the optimization and maintenance of Google Pay service functionality. Google also maintains the right to merge the processed transaction data with other information acquired and reserve when using other Google services.
You can access Google Pay's terms of use here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0ldt=googlepaytosldl=en .
Additional information on data protection for Google Pay is available at the following web address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0ldt=privacynoticeldl=en .
- Klarna
This website offers various online payment methods from the following provider: Klarna Bank AB, located at Sveavägen 46, 111 34 Stockholm, Sweden. If you select a payment method that requires an advance payment (e.g., credit card payment), the payment data provided during the order placement, including your name, address, bank and payment
card details, currency, and transaction number, alongside information about your order, is transferred to the provider, according to Art. 6 para. 1 sentence 1 lit. b DSGVO. In such cases, your data is only disclosed for the purpose of processing payment with the provider and only to the extent required for this purpose. For payment methods requiring advance payment, such as installment purchase, invoice purchase, or direct debit, you may also be prompted to provide specific personal data (first name, last name, street,
house number, postal code, city, date of birth, email address, telephone number, and, if relevant, alternative payment method data) during the order placement.
(10) To safeguard
A cookie only contains information about the time when a particular advertising medium was clicked on by a terminal device. The AWIN tracking cookies contain an individual sequence of digits which cannot be assigned to the individual user and which documents the affiliate program of an advertiser, the publisher, and the time of the user's action (click or view). AWIN also collects information about the mobile device from which a transaction is executed, e.g. the operating system and the calling browser. If the information also contains personal data, the described processing is carried out on the basis of our legitimate financial interest in the processing of commission payments with AWIN pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO. If you do not wish cookies to be stored in your browser, you can do this by setting your browser accordingly. You can deactivate the storage of cookies in your respective browser under tools/internet options, limit them to certain websites or set your browser so that it notifies you as soon as a cookie is sent. Please note, however, that in this case you must expect a limited display of online offers and limited user guidance. You can also delete cookies at any time. In this case, the information stored in it is removed from your mobile device.
For more information on AWIN's use of data, please refer to the company's privacy policy:
https://www.awin.com/gb/legal/privacy-policy .
(11) Web Analysis Services - Google (Universal) Analytics
This website employs Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, situated at Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google). Google (Universal) Analytics utilizes cookies, which are text files stored on your computer to assist in the analysis of how users interact with the website. The information generated by the cookie regarding your website usage, including a truncated IP address, is typically transmitted to and stored on a Google server, possibly being transferred to Google LLC's servers in the United States. This website uses Google (Universal) Analytics exclusively with the _anonymizeIp() extension, which anonymizes IP addresses by shortening them, preventing direct personal identification. Your IP address will be shortened by Google within the European Union member states or other signatory states of the Agreement on the European Economic Area, except in rare cases where it is transmitted to a Google LLC server in the USA and shortened there. Google will employ this data on our behalf to evaluate your website usage, create reports on website activities, and provide us with additional services related to website and internet usage. The IP address provided by your browser during Google (Universal) Analytics operations is not combined with other Google data. Through a special feature called Demographics, Google Analytics allows for the creation of statistics indicating the age, gender, and interests of website visitors based on interest-based advertising evaluations and third-party information. This facilitates the segmentation and differentiation of website user groups for targeted marketing endeavors. However, data collected via Demographics cannot be attributed to a specific individual. For comprehensive details regarding the initiated processing activities and Google's data management from websites, please refer to: https://policies.google.com/technologies/partner-sites?hl=en .
All of the aforementioned processes, particularly the configuration of Google Analytics cookies to access information on the user's device, are exclusively carried out upon your explicit consent, compliant with Art. 6 para. 1 sentence 1 lit. a DSGVO. Without your consent, the use of Google Analytics during your website visit will not be executed. You retain the option to withdraw your consent at any time, impacting future use. To exercise your right to withdraw consent, kindly deactivate this service through the Cookie-Consent-Tool accessible on the website. We have a data processing agreement with Google in place for utilizing Google Analytics, which commits Google to safeguard our website visitors data and refrain from sharing it with third parties.
For transmitting data from the European Union to the United States, Google relies on the standard data protection clauses defined by the European Commission, designed to ensure compliance with the European data protection standards within the United States.
Additional information about Google (Universal) Analytics is available here:
https://policies.google.com/privacy?hl=engl=en .
(12) Utilization of Live Chat System
This website incorporates technology from Intercom, Inc, situated at 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland, (www.intercom.com). This technology is employed to gather and retain anonymous data for web analysis purposes and to facilitate the operation of a live chat system for addressing real-time support queries. These anonymous data can be employed to establish user profiles under a pseudonym. This process may involve the use of cookies, which are small text files locally stored within the visitor's internet browser cache, enabling the identification of the internet browser. If information collected in this manner pertains to personal data, processing occurs in compliance with Art. 6 para. 1 sentence 1 lit. If DSGVO, based on our legitimate interest in offering efficient customer service and conducting statistical analysis of user behavior to enhance our services. The data obtained through Intercom technology will not be utilized to personally identify the website visitor and will not be merged with personal data concerning the pseudonym's owner unless separate consent has been granted by the concerned individual. To prevent the storage of Intercom cookies, you have the option to configure your internet browser in such a way that it no longer allows future cookie storage, or you can delete cookies that have already been stored. However, deactivating cookies may limit your access to the full array of features on this website. You reserve the right to object to data collection and retention, aimed at establishing a pseudonymized user profile, at any time, with an effect on future interactions. To raise your objection, please contact us via email, using the address specified in the website's imprint.
(13) For managing our accounting tasks, we utilize DATEV eGs cloud-based accounting software, located at Paumgartnerstr. 6-14, 90429 Nuremberg, Germany (DATEV). DATEV's role includes the processing of both incoming and outgoing invoices and, when applicable, the handling of our business's bank transactions. This process enables automatic invoice recording, the matching of invoices to transactions, and the creation of financial accounting through a semi- automated procedure. In cases where personal data is involved in this process, the processing aligns with Art. 6 Para. 1 lit. f DSGVO, on the grounds of our legitimate interest in efficiently organizing and documenting our business transactions. For additional information about DATEV, automated data processing, and data protection regulations, please refer to https://www.datev.de/web/de/m/ueber-datev/datenschutz/ .
4. Rights of affected persons
You have the following rights:
(1) Right to information and correction of your data:
You have the right to receive information from us free of charge about whether and what personal data we have stored about you and to information about how we use your personal data. If, despite our efforts to ensure that your data is correct and up to date, incorrect information is stored, we will correct it immediately at your request.
(2) Right to erasure of your data:
You may also request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
(3) Right to restriction of the processing of your data:
You may request the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 DSGVO.
(4) Right to data portability:
You also have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
(5) Right to file a complaint:
You can file a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.
(6) Right to object:
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, provided that there are reasons for this arising from your particular situation.
(7) Right to withdraw your consent to data processing:
Some data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
5. Deletion of data
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 DSGVO. If no specific deletion date is specified in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This applies in particular to data that must be retained for commercial or tax law reasons.
1. Responsible entity
The controller responsible for data processing on this website is Skog UG (haftungsbeschränkt) i.G., Bruckstraße 17, 72488 Sigmaringen, Germany, e-mail: hello@skog-world.com.
2. Encryption
We use SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
3. Collection and Storage of personal data
(1) When you visit our website
When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted after a maximum of [...] months: Date and time of access, amount of data transferred in bytes, origin or reference that led to the page, browser used, operating system used and IP address used. The aforementioned data is processed by us for the following purposes: Ensuring a smooth connection to the website, ensuring convenient use of our website, evaluating system security and stability and for other administrative purposes. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. We also use cookies and analysis services when you visit our website. You will find more detailed explanations on this in this privacy policy.
(2) When using our contact form, contacting us by e-mail
We offer you the option to contact us using the contact-forms provided on the website. You must provide your name and e-mail address so that we know who sent the request and can respond to it. You can enter further information in the contact form, which will then also be recorded, stored and transmitted with your contact request so that we can answer your request in the best possible way. If you send us an e-mail, the following data will be collected and stored: [Please complete].
(3) Cookies
To enhance your experience on our website and enable specific functionalities, we employ what are known as cookies on various pages. These are diminutive text files that get stored on your device. Some of these cookies are deleted once your browser session concludes, meaning when you close your browser (these are referred to as session cookies). Conversely, others persist on your device and grant us, or our partner companies (referred to as third-party cookies), the capacity to recognize your browser during your next visit (these are known as persistent cookies). When cookies are in use, they gather and process distinct user data, such as browser and location information, as well as individual IP address values. Persistent cookies are automatically removed after a specified duration, the length of which varies depending on the particular cookie. You can review the duration of each cookies storage in your web browser's cookie settings overview. In some instances, cookies serve to streamline the order process by saving settings (e.g., retaining the contents of a virtual shopping cart for a subsequent website visit). When personal data is processed via specific cookies set by us, the processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO either for contract execution or in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO to uphold our legitimate interests in optimizing website functionality and creating a user- friendly, effective webpage experience. We collaborate with advertising partners who assist us in making our website more engaging for you. In pursuit of this objective, cookies from partner companies are also stored on your hard drive when you visit our website (these are known as third-party cookies). Specific information about the usage of these cookies and the extent of the data collection in each case will be provided to you individually and separately in the following sections. Please be aware that you have the option to configure your browser to receive notifications about cookie settings and independently decide whether to accept them or exclude their acceptance in particular instances or entirely. The management of cookie settings varies according to each browser, and you can find details on how to modify your cookie settings in the help menu of your specific browser. Information on this can be found in the respective browser links provided below:
- Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac.
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies.
- Firefox: https://www.mozilla.org/en-US/privacy/websites/#cookies.
- Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktophl=en .
Please note that the functionality of our website may be limited if cookies are not accepted.
(4) Data Processing When Creating a Customer Account and for Contract Execution In compliance with Art. 6 para. 1 sentence 1 lit. b DSGVO, personal data will continue to be collected and processed when you provide it for the execution of a contract or when opening a customer account. The particulars of what data is collected can be ascertained from the respective input forms. You can delete your customer account at any time by sending a message to the controller's address mentioned above. We store and use the data provided by you for contract execution. Following the complete execution of the contract or the deletion of your customer account, your data will be locked in consideration of tax and commercial retention periods and will be deleted after the expiration of these periods, unless you have explicitly consented to further data usage or if a legally permissible retention of data beyond this period is provided for on our end, as we will duly inform you about below.
(5) Utilization of Client Data for Direct Advertising
When you subscribe to our email newsletter, we will regularly furnish you with information about our offers. The sole mandatory information for newsletter dispatch is your email address. The provision of additional potential data is voluntary and aids in personalizing our communication. We employ the double opt-in procedure for sending newsletters, meaning that we will not send you an email newsletter unless you have explicitly confirmed that you consent to receiving it. You will then be sent a confirmation email containing a request to affirm your desire to receive future newsletters by clicking on an designated link. By activating the confirmation link, you grant us consent to utilize your personal data in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO. Your registration for the newsletter will result in us storing your IP address, provided by your Internet Service Provider (ISP), along with the registration date and time. This data is retained to detect any potential misuse of your email address in the future. The information we collect during your newsletter registration is exclusively employed for promotional purposes through the newsletter. At any time, you can unsubscribe from the newsletter using the designated link within the newsletter or by sending a message to the responsible party mentioned at the outset. Following your cancellation, your email address will be promptly excised from our newsletter distribution list, unless you have expressly consented to further data usage or if we retain the right to utilize data beyond that, as permitted by law, and as we will duly inform you in this declaration. If you've shared your email address with us during product purchases, we reserve the right to periodically send you offers via email for products similar to those you've previously purchased. According to § 7 (3) of the German law against unfair competition (UWG), we are not obliged to acquire separate consent from you for this purpose. This data processing is solely grounded in our legitimate interest for personalized direct advertising, pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO. If you initially object to the use of your email address for this purpose, we will refrain from sending you any emails. You have the right to object to the future utilization of your email address for the advertising purpose outlined above at any time by notifying the controller mentioned at the beginning of this document. In this regard, you are only liable for the standard transmission costs. Once your objection is received, the use of your email address for the purposes of advertising will be discontinued without delay. Our email newsletters are distributed through the technical service provider, The Rocket Science Group, LLC, doing business as MailChimp, with offices at 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (https://mailchimp.com). We share the information you provided during newsletter registration with them. This sharing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO and is aligned with our legitimate interest in using an efficient, secure, and user-friendly newsletter system. Kindly note that your data is generally transferred to a MailChimp server in the United States and stored there. MailChimp utilizes this data for the distribution and statistical assessment of the newsletter on our behalf. For evaluation purposes, the sent emails contain web beacons or tracking pixels, which are single-pixel image files hosted on our website. This mechanism allows us to discern whether a newsletter message has been opened and which links were clicked. Additionally, it captures technical information (e.g., time of retrieval, IP address, browser type, and operating system). This data is collected exclusively in pseudonymous form and is not linked to other personal data about you. A direct personal connection is excluded. This data is exclusively used for statistical analysis of newsletter campaigns, with the outcomes aiding us in shaping future newsletters to better align with recipient interests. Should you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter. Furthermore, MailChimp may use this data under Art. 6 para. 1 sentence 1 lit. f DSGVO based on its own legitimate interest in customizing and optimizing the service to meet demand and for market research, such as ascertaining the geographical origin of recipients. However, MailChimp does not use the data of our newsletter recipients to contact them directly or share it with third parties. To protect your data in the United States, we have established a data processing agreement (Data Processing Agreement) with MailChimp based on the standard contractual clauses of the European Commission, facilitating the transmission of your personal data to MailChimp. If you are interested in reviewing this data processing agreement, you can find it at the following link: https://mailchimp.com/legal/data-processing-addendum/ .
You can view MailChimp's privacy policy at: https://mailchimp.com/legal/privacy/ .
(6) Email Notification of Product Availability If our online store furnishes the option to notify you by email about the availability of selected, temporarily unavailable merchandise, you can subscribe to our email notification service for product availability. By registering for this service, we will send you a one-time email regarding the availability of the specific item you've chosen. The only mandatory information required to send this notification is your email address. The provision of additional data is optional and enables us to personalize our communication with you. We employ the double opt-in process for sending these notifications, meaning we will only send you a notification once you've expressly confirmed your desire to receive it. You will then receive a confirmation email asking you to click on a link to confirm your wish to receive such notifications. By clicking the confirmation link, you provide your consent to the use of your personal data in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO. Once you opt-in to our email notification service for product availability, we store your IP address, as submitted by your internet service provider (ISP), along with the date and time of enrollment. This is done to help detect any potential misuse of your email address at a later date. The data collected when you register for our email notification service regarding goods availability is exclusively used to inform you about the availability of a particular item in our online shop. You can unsubscribe from the email notification service for product availability at any time by sending a corresponding message to the data processing controller mentioned at the beginning. After unsubscribing, your email address will be immediately removed from our distribution list, barring your expressed consent to further data usage, or unless we retain the right to continue using your data as allowed by law, details of which will be provided in this declaration.
(7) Data Processing for Order Fulfillment
The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will share your payment data with the authorized financial institution for the purpose of processing payments if it is required for payment processing. In cases where payment service providers are used, we will explicitly inform you of this below. The legal basis for data transfer is Art. 6 para. 1 sentence 1 lit. b DSGVO.
(8) Disclosure of Personal Data to Shipping Service Providers We engage the following transportation service providers:
- Deutsche Post AG, located at Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany. In compliance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we transmit your email address and/or telephone number to the provider before delivering the goods, for the purpose of scheduling a delivery date or sending delivery notifications, provided you have expressly granted your consent during the ordering process. Otherwise, we share solely the recipient's name and delivery address with the supplier, for the purpose of delivery, in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO. This transmission occurs only to the extent necessary for the delivery of the goods. In such cases, advanced coordination of the delivery date with the supplier or notification of delivery is not feasible. At any time, consent can be revoked, with future effect, either to the responsible party mentioned above or to the provider.
- DHL, located at Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
In compliance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we transmit your email address and/or telephone number to the provider before delivering the goods, for the purpose of scheduling a delivery date or sending delivery notifications, provided you have expressly granted your consent during the ordering process. Otherwise, we share solely the recipient's name and delivery address with the supplier, for the purpose of delivery, in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO. This transmission occurs only to the extent necessary for the delivery of the goods. In such cases, advanced coordination of the delivery date with the supplier or notification of delivery is not feasible. At any time, consent can be revoked, with future effect, either to the responsible party mentioned above or to the provider.
- DHL Express Germany GmbH, located at Heinrich-Brüning-Str. 5, 53113 Bonn, Germany. In compliance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we transmit your email address and/or telephone number to the provider before delivering the goods, for the purpose of scheduling a delivery date or sending delivery notifications, provided you have expressly granted your consent during the ordering process. Otherwise, we share solely the recipient's name and delivery address with the supplier, for the purpose of delivery, in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO. This transmission occurs only to the extent necessary for the delivery of the goods. In such cases, advanced coordination of the delivery date with the supplier or notification of delivery is not feasible. At any time, consent can be revoked, with future effect, either to the responsible party mentioned above or to the provider.
(9) Utilization of Payment Service Providers
- Apple Pay
If you opt for the Apple Pay payment method offered by Apple Distribution International (Apple), with a registered address at Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is executed through your iOS, watchOS, or macOS device's Apple Pay functionality. This entails debiting a payment card linked to Apple Pay. Apple Pay leverages security features integrated into your device's hardware and software to safeguard your transactions. To authorize a payment, you must input a pre-defined code and verify it through the Face ID or Touch ID feature on your device. For payment processing, the details you provide during the order placement, along with order-specific information, are transmitted to Apple in an encrypted format. Subsequently, Apple further encrypts this data with a developer-specific key before conveying it to the payment service provider associated with the payment card stored in Apple Pay for payment processing. This encryption guarantees that only the originating website can access the payment information. After payment completion, Apple dispatches your device account number and a unique transaction-specific dynamic security code to the originating website to verify the payment. If personal data is processed in these transmissions, the processing solely serves the purpose of payment processing, as stipulated by Art. 6 para. 1 sentence 1 lit. b DSGVO. Apple retains anonymized transaction data, encompassing approximate purchase amounts, dates, times, and transaction success status. This anonymization completely eliminates any personal association. Apple employs this anonymized data for enhancing Apple Pay and other Apple products and services. When using Apple Pay on iPhone or the Apple Watch to finalize a purchase conducted via Safari on Mac, your Mac and the authorization device exchange information through an encrypted channel on Apple's servers. Apple neither processes nor retains this information in a format allowing personal identification. You can disable the ability to use Apple Pay on your Mac through your iPhone settings. First, access Wallet Apple Pay and then disable Allow payments on Mac.
For more information regarding Apple Pay privacy, please visit the following web address:
https://support.apple.com/en-gb/HT203027 .
- Google Pay
If you opt for the Google Pay payment method provided by Google Ireland Limited, with a registered address at Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google), payment processing is facilitated through the Google Pay application on your Android device, running at least Android 4.4 (KitKat) with NFC capability. This process involves charging a payment card registered in Google Pay or a verified payment system (e.g. PayPal). For transactions exceeding € 25,00, prior unlocking of your mobile device is required, which is subject to the respective verification method (e.g., face recognition, password, fingerprint, or pattern). For payment processing, the details you provide during the order placement, alongside order specific information, are forwarded to Google. Google subsequently transmits your payment information stored in Google Pay as a unique transaction number to the source website, enabling payment verification. This transaction number does not include any information related to the actual payment data of your payment method registered with Google Pay; it is generated and transmitted as a uniquely valid numeric token. In all transactions via Google Pay, Google serves as an intermediary exclusively to process the payment transaction. The transaction occurs solely between the user and the source website, involving the debiting of the payment method registered with Google Pay. If personal data is processed in the mentioned transmissions, the processing serves solely the purpose of payment processing in compliance with Art. 6 para. 1 sentence 1 lit. b DSGVO. Google maintains the right to compile, store, and assess specific transaction-related data for each Google Pay transaction.. This data encompasses transaction dates, times, amounts, the merchant's location and description, the description provided by the merchant of the purchased goods or services, attached photos, the seller and buyer or sender and recipient's names and email addresses, the payment method used, your description of the transaction's purpose, and, if applicable, the transaction-associated offer. According to Google, this processing is performed exclusively in compliance with Art. 6 Para. 1 lit. f DSGVO, founded on the legitimate interest in accurate accounting, transaction data verification, and the optimization and maintenance of Google Pay service functionality. Google also maintains the right to merge the processed transaction data with other information acquired and reserve when using other Google services.
You can access Google Pay's terms of use here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0ldt=googlepaytosldl=en .
Additional information on data protection for Google Pay is available at the following web address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0ldt=privacynoticeldl=en .
- Klarna
This website offers various online payment methods from the following provider: Klarna Bank AB, located at Sveavägen 46, 111 34 Stockholm, Sweden. If you select a payment method that requires an advance payment (e.g., credit card payment), the payment data provided during the order placement, including your name, address, bank and payment
card details, currency, and transaction number, alongside information about your order, is transferred to the provider, according to Art. 6 para. 1 sentence 1 lit. b DSGVO. In such cases, your data is only disclosed for the purpose of processing payment with the provider and only to the extent required for this purpose. For payment methods requiring advance payment, such as installment purchase, invoice purchase, or direct debit, you may also be prompted to provide specific personal data (first name, last name, street,
house number, postal code, city, date of birth, email address, telephone number, and, if relevant, alternative payment method data) during the order placement.
(10) To safeguard
A cookie only contains information about the time when a particular advertising medium was clicked on by a terminal device. The AWIN tracking cookies contain an individual sequence of digits which cannot be assigned to the individual user and which documents the affiliate program of an advertiser, the publisher, and the time of the user's action (click or view). AWIN also collects information about the mobile device from which a transaction is executed, e.g. the operating system and the calling browser. If the information also contains personal data, the described processing is carried out on the basis of our legitimate financial interest in the processing of commission payments with AWIN pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO. If you do not wish cookies to be stored in your browser, you can do this by setting your browser accordingly. You can deactivate the storage of cookies in your respective browser under tools/internet options, limit them to certain websites or set your browser so that it notifies you as soon as a cookie is sent. Please note, however, that in this case you must expect a limited display of online offers and limited user guidance. You can also delete cookies at any time. In this case, the information stored in it is removed from your mobile device.
For more information on AWIN's use of data, please refer to the company's privacy policy:
https://www.awin.com/gb/legal/privacy-policy .
(11) Web Analysis Services - Google (Universal) Analytics
This website employs Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, situated at Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google). Google (Universal) Analytics utilizes cookies, which are text files stored on your computer to assist in the analysis of how users interact with the website. The information generated by the cookie regarding your website usage, including a truncated IP address, is typically transmitted to and stored on a Google server, possibly being transferred to Google LLC's servers in the United States. This website uses Google (Universal) Analytics exclusively with the _anonymizeIp() extension, which anonymizes IP addresses by shortening them, preventing direct personal identification. Your IP address will be shortened by Google within the European Union member states or other signatory states of the Agreement on the European Economic Area, except in rare cases where it is transmitted to a Google LLC server in the USA and shortened there. Google will employ this data on our behalf to evaluate your website usage, create reports on website activities, and provide us with additional services related to website and internet usage. The IP address provided by your browser during Google (Universal) Analytics operations is not combined with other Google data. Through a special feature called Demographics, Google Analytics allows for the creation of statistics indicating the age, gender, and interests of website visitors based on interest-based advertising evaluations and third-party information. This facilitates the segmentation and differentiation of website user groups for targeted marketing endeavors. However, data collected via Demographics cannot be attributed to a specific individual. For comprehensive details regarding the initiated processing activities and Google's data management from websites, please refer to: https://policies.google.com/technologies/partner-sites?hl=en .
All of the aforementioned processes, particularly the configuration of Google Analytics cookies to access information on the user's device, are exclusively carried out upon your explicit consent, compliant with Art. 6 para. 1 sentence 1 lit. a DSGVO. Without your consent, the use of Google Analytics during your website visit will not be executed. You retain the option to withdraw your consent at any time, impacting future use. To exercise your right to withdraw consent, kindly deactivate this service through the Cookie-Consent-Tool accessible on the website. We have a data processing agreement with Google in place for utilizing Google Analytics, which commits Google to safeguard our website visitors data and refrain from sharing it with third parties.
For transmitting data from the European Union to the United States, Google relies on the standard data protection clauses defined by the European Commission, designed to ensure compliance with the European data protection standards within the United States.
Additional information about Google (Universal) Analytics is available here:
https://policies.google.com/privacy?hl=engl=en .
(12) Utilization of Live Chat System
This website incorporates technology from Intercom, Inc, situated at 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland, (www.intercom.com). This technology is employed to gather and retain anonymous data for web analysis purposes and to facilitate the operation of a live chat system for addressing real-time support queries. These anonymous data can be employed to establish user profiles under a pseudonym. This process may involve the use of cookies, which are small text files locally stored within the visitor's internet browser cache, enabling the identification of the internet browser. If information collected in this manner pertains to personal data, processing occurs in compliance with Art. 6 para. 1 sentence 1 lit. If DSGVO, based on our legitimate interest in offering efficient customer service and conducting statistical analysis of user behavior to enhance our services. The data obtained through Intercom technology will not be utilized to personally identify the website visitor and will not be merged with personal data concerning the pseudonym's owner unless separate consent has been granted by the concerned individual. To prevent the storage of Intercom cookies, you have the option to configure your internet browser in such a way that it no longer allows future cookie storage, or you can delete cookies that have already been stored. However, deactivating cookies may limit your access to the full array of features on this website. You reserve the right to object to data collection and retention, aimed at establishing a pseudonymized user profile, at any time, with an effect on future interactions. To raise your objection, please contact us via email, using the address specified in the website's imprint.
(13) For managing our accounting tasks, we utilize DATEV eGs cloud-based accounting software, located at Paumgartnerstr. 6-14, 90429 Nuremberg, Germany (DATEV). DATEV's role includes the processing of both incoming and outgoing invoices and, when applicable, the handling of our business's bank transactions. This process enables automatic invoice recording, the matching of invoices to transactions, and the creation of financial accounting through a semi- automated procedure. In cases where personal data is involved in this process, the processing aligns with Art. 6 Para. 1 lit. f DSGVO, on the grounds of our legitimate interest in efficiently organizing and documenting our business transactions. For additional information about DATEV, automated data processing, and data protection regulations, please refer to https://www.datev.de/web/de/m/ueber-datev/datenschutz/ .
4. Rights of affected persons
You have the following rights:
(1) Right to information and correction of your data:
You have the right to receive information from us free of charge about whether and what personal data we have stored about you and to information about how we use your personal data. If, despite our efforts to ensure that your data is correct and up to date, incorrect information is stored, we will correct it immediately at your request.
(2) Right to erasure of your data:
You may also request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
(3) Right to restriction of the processing of your data:
You may request the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 DSGVO.
(4) Right to data portability:
You also have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
(5) Right to file a complaint:
You can file a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.
(6) Right to object:
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, provided that there are reasons for this arising from your particular situation.
(7) Right to withdraw your consent to data processing:
Some data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
5. Deletion of data
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 DSGVO. If no specific deletion date is specified in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This applies in particular to data that must be retained for commercial or tax law reasons.