Data privacy policy of SM Trade GmbH - owner of the Candy Store

Thank you for your interest in our company. We take the privacy seriously.

You can basically use our website without revealing any of personal information. If an affected person wishes to use our company's services via our website, personal data processing may be required. If the processing of personal data is required and there is no legal basis for such processing, we will always seek the consent of the data subject.

The processing of personal data (such as the name, address, e-mail address or telephone number of a data subject) is always in accordance with the General Data Protection Regulation (DSGVO) and in accordance with our country-specific privacy policy.

With the following privacy policy we would like to inform the public about the nature, extent and purpose of the personal data collected, used and processed by us. Likewise, data subjects are informed of their rights under this privacy policy.

As the responsible controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through our website. However, data transmissions over the Internet can generally contain security holes. Thus, a 100% protection cannot be guaranteed. Therefore, of course, each affected person may alternatively also, e.g. transfer personal data by telephone.

1. Definitions

This Privacy Policy is based on the definitions used by the European Regulatory Authority when adopting the GDPR (Article 4 GDPR). This privacy policy should be easy to read and understand for anyone. To ensure this, we would first like to explain the terminology used. This privacy policy uses, among other things, these definitions:

• 'personal data' means any information relating to an identified or identifiable natural person ('the data subject'); a natural person is regarded as identifiable, which can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical , physiological, genetic, mental, economic, cultural or social identity of this natural person;
• "data subject" means any identified or identifiable natural person whose personal data are processed by the controller.

• "Processing" of any process or series of operations performed with or without the aid of automated procedures, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading out, querying Use, disclosure by transmission, dissemination or other means of provision, matching or linking, restriction, erasure or destruction;
• "Restriction of processing" means the marking of personal data stored in order to limit its future processing;
• "profiling" means any kind of automated processing of personal data that involves the use of such personal information to evaluate certain personal aspects relating to a natural person, in particular aspects of work performance, economic situation, health, to analyze or predict personal preferences, interests, reliability, behavior, location or change of location of that natural person;
• 'controller' means the natural or legal person, public authority, body or body that alone or jointly with others decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his appointment may be provided for under Union or national law;
• "Recipient" means a natural or legal person, public authority, agency or other entity to whom personal data are disclosed, whether or not it is a third party. However, authorities that may receive personal data under Union or national law in connection with a particular mission are not considered to be recipients; the processing of such data by the said authorities shall be in accordance with the applicable data protection rules in accordance with the purposes of the processing;
• "Third party" means a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or processor to process the personal data;
• "consent" of the data subject to any voluntary, informed and unambiguous expression of intent in the form of a statement or other unambiguous confirmatory act by which the data subject expresses his understanding of the processing of the personal information concerning him / her Data agrees.

2.  Name and contact details of the controller

This privacy policy applies to data processing by:

Responsible: SM Trade GmbH, represented by the managing director Mr. Simon Zika, E-Mail: info@candy-stores.de, Phone: +49 (0) 176 633 052 37

3. Collection and storage of personal data as well as the nature and purpose of their use

a) When visiting the website

You can basically use our website without disclosing your identity. When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

• IP address of the requesting computer,
• date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• the browser used and, if applicable, the operating system of your computer and the name of your access provider.

The data mentioned are processed by us for the following purposes:

• ensuring a smooth connection of the website,
• ensuring comfortable use of our website,
• Evaluation of system security and stability as well
• for further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows from the data collection purposes listed above. In no case we use the collected data for the purpose of drawing conclusions about you.

All access data will be deleted no later than seven days after the end of your page visit.

In addition, we use cookies and analysis services when visiting our website. Further details can be found under points 5 and 7 of this privacy policy.

b) By using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on our website. It is necessary to provide a valid e-mail address so that we know who the request came from and to answer it. Further information can be provided voluntarily. It is up to you to decide whether you want to enter this information in the contact form.

The data processing for the purpose of contacting us is in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO based on your voluntarily granted consent.

The personal data collected by us for the use of the contact form will be automatically deleted after completion of the request made by you.

c) For orders via our website

You can either place orders as a guest through our website without registering or register in our shop as a customer for future orders. Registering has the advantage for you that you can log in to our shop directly with your e-mail address and password in the event of a future order, without having to enter your contact information again.

Your personal data will be entered in an input mask and sent to us and stored. If you place an order via our website, we will collect the following data in the case of a guest order as well as in the case of a registration in the shop:

• salutation, first name, last name,
• a valid e-mail address,
• Address,
• telephone number (landline and / or mobile)

The collection of these data takes place

• to identify you as our customer;
• to process, fulfill and handle your order;
• for correspondence with you;
• for invoicing;
• to settle possible liability claims, as well as the assertion of any claims against you;
• to ensure the technical administration of our website;
• to manage our customer data.

As part of the ordering process, you will obtain consent to process this information.

The data processing is based on your order and / or registration and is in accordance with
Art. 6 para. 1 p. 1 lit. b DSGVO for the stated purposes for the proper processing of your order and for the mutual fulfillment of obligations under the purchase agreement.

The personal data collected by us for the processing of your order will be stored until the statutory retention period has expired and then deleted, unless we are under Article 6 para. 1 sentence 1 lit. c DSGVO are required to store for a longer period of time due to tax and commercial requirements for storage and documentation (HGB, StGB or AO) or you are obliged to make further storage in accordance with
Art. 6 para. 1 sentence 1 lit. a DSGVO have consented.

d) E-mail advertising with registration for the newsletter 

If you register for our newsletter, we will use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Para . 1 p. 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time and you can either send a message to the contact option described below or use a link provided in the newsletter. After unsubscribing, we will delete your e-mail address, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration. "

4. Disclosure of data

A transfer of your personal data from us to third parties will be made exclusively to the service partners involved in the execution of the contract. the logistics company commissioned with the delivery and the credit institution responsible for payment matters. However, in the case of the disclosure of your personal data to third parties, the scope of the data transmitted is limited to the minimum required.

For payment via PayPal, credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal, we will transfer your payment data to Paypal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), further. PayPal reserves the right to carry out a credit check for payment via credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal. The result of the credit check with respect to the statistical probability of default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit information can contain probability values ​​(so-called score values). Insofar as score values ​​are included in the results of the credit rating, they are based on a scientifically recognized mathematical-statistical procedure. In the calculation of the score values, inter alia, address data is incorporated. Further data protection information can be found in the PayPal Privacy Policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

A transfer of your personal data to third parties for purposes other than those mentioned above does not take place.

We will only share your personal information with third parties if:

• You yours according to Art. 6 para. 1 sentence 1 lit. a DSGVO have given express consent to this
• disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO is required to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest in not disclosing your data,
• in the event that disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO a legal obligation exists, as well
• this is legally permissible and according to Art. 6 para. 1 sentence 1 lit. b DSGVO is required for the settlement of contractual relationships with you.

As part of the ordering process, we will obtain your consent to share your information with third parties.

5. Use of cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not damage your device, do not contain viruses, Trojans or other malicious software.

In the cookie information is stored, each resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity.

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our page.

In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to use our services, it automatically recognizes that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer (see Section 7). These cookies allow us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined time.

The data processed by cookies are for the purposes mentioned in order to safeguard our legitimate interests as well as third parties pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO required.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a note always appears before a new cookie is created. However, disabling cookies completely may mean that you can not use all features of our website.

6. Links to third party websites

The links published on our website are researched and compiled with the utmost care. However, we have no influence on the current and future design and content of the linked pages. We are not responsible for the content of the linked pages and we do not endorse the content of these pages. For illegal, incorrect or incomplete contents as well as for damages, which result from the use or disuse of the information, the provider of the web-site, to which reference was made, is liable. The liability of those who only point to the publication by a link is excluded. We are only responsible for third-party references when we receive information from them, i. also of any illegal or punishable content, have positive knowledge and it is technically possible and reasonable for us to prevent their use.

7. Analysis and Tracking Tools

The tracking measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f DSGVO. With the tracking measures to be used, we would like to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as justified within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics1

We use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheater Parkway, Mountain View, CA 94043, for the purpose of customizing and continually optimizing our pages. USA, hereafter "Google"). In this context, pseudonymised usage profiles are created and cookies (see under 5) are used. The information generated by the cookie about your use of this website such as

• browser type / version,
• used operating system,
• Referrer URL (the previously visited page),
• host name of the accessing computer (IP address),
• time of server request,

are transferred to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage for the purpose of market research and customization of these websites. This information may also be transferred to third parties if required by law or as far as third parties process this data in the order. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of our website may be fully exploited.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on https: //tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on the link above. An opt-out cookie will be set which will prevent the future collection of your data when you visit our website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

For more information about privacy related to Google Analytics, please see the following link in the Google Analytics Help Center: https://support.google.com/analytics/answer/6004245?hl=en