Data protection declaration Nebulus GmbH
We take data protection seriouslyThe protection of your privacy when processing personal data is an important concern for us. When you visit our website, our web servers store the IP of your Internet service provider, the website from which you visit us, the web pages you visit on our site and the date and duration of the visit as standard. This information is absolutely necessary for the technical transmission of the web pages and secure server operation. A personalised evaluation of this data does not take place.
If you send us data via the contact form, this data will be stored on our servers for data backup purposes. Your data will only be used by us to process your request. Your data will be treated as strictly confidential. It will not be passed on to third parties.
You can print or save this document by using the usual functionality of your internet service program (=browser: there usually "File" -> "Save as"). You can also download and archive this document in PDF form by clicking here. To open the PDF file, you will need the free program Adobe Reader (at www.adobe.de) or comparable programs that run the PDF format.
Person responsible: Nebulus GmbH
Mr Alexander Scharnböck
Fax: 49 (991) 280 917 - 71
Phone: 0991 / 344 788 100
1. Collection, processing and use of personal data
1.a Personal dataPersonal data is information about factual or personal circumstances of an identified or identifiable natural person. This includes, for example, your name, your telephone number, your address, as well as all inventory data that you provide to us during registration and when creating your customer account. Statistical data that we collect, for example, when you visit our web shop and that cannot be directly linked to your person are not included here. For example, these are statistics about which pages of our shop are particularly popular or how many users visit certain pages of the Mustermann shop.
1.b Registration and ordering on our websiteIf you register on our website or create a user account, personal data will also be collected from you. We would like to point out that although registration may provide further access to the content of our website, it is not a mandatory requirement for using our website. Which personal data is transmitted to the data controller in the process is determined by the respective input mask used for registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be passed on to one or more processors, for example a parcel service provider for postal delivery to you, who will also use the personal data exclusively for an internal use attributable to the controller. During a registration process on our website, the following data is collected from you and then stored by us:
1.c NewsletterIf you voluntarily subscribe to our newsletter (regular promotional information e-mail with offers or other information from our company), the data you provide will be used exclusively for this purpose and will not be passed on to third parties. This includes information relevant to the service or registration. The validity of the email address is checked using the so-called "double-opt-in" procedure. For this purpose, the order of the newsletter is checked by sending a confirmation email and the reply. No further data is collected. Unsubscribing from the newsletter (revocation of consent) is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. You will not incur any additional costs for the cancellation beyond the regular promotion costs (e.g. costs for a telephone call). The data processing based on your consent is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.
1.d Sending the newsletterExisting customers We reserve the right to regularly send you offers for similar goods or services to those already purchased from our range by e-mail. In accordance with § 7 para. 3 UWG, we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 Para. 1 lit. f DSGVO. If you have initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. This will only incur transmission costs for you according to the basic rates. After receipt of your objection, your email address will be removed from the distribution list.
1.e Contact option via the websiteIf you send us enquiries via the contact form or by email, your details from the enquiry form or email, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and or contacting the person concerned. We do not pass this data on to third parties. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. Data processing based on your consent is based on Art. 6 para. 1 p. 1 lit. a DSGVO. The deletion of the personal data collected for the use of the contact form takes place automatically after your request has been dealt with. You have the right to revoke your consent to data processing at any time.
1.f Comment function in the blog on the websiteWhen comments are made on our site, in addition to this information, the selected user name is also recorded and stored so that unlawful content can also be prosecuted to our relief.
1.g Storage periodWe store the personal data collected for the processing of your order and transmitted to us until the expiry of the statutory retention obligation. Your data will then be deleted by us unless we are obliged to store it for a longer period in accordance with Article 6 (1) sentence 1 lit. c DSGVO due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this in accordance with Article 6 (1) sentence 1 lit. a DSGVO.
1.h Obligation to order - and possible non-orderThe provision of personal data is partly required by law (tax law) or may result from contractual regulations (transparency of the contractual partner). Failure to provide personal data would be contrary to the conclusion of a contract and therefore does not take place. Any information on the legally or contractually required provision of personal data can be obtained from the person responsible.
1.i Existence of automated decision makingWe do not use automated decision making, or profiling.
1.j Routine deletion and blocking of data. When the retention period detailed above has expired, the personal data will be routinely erased.
2. Use of your data for promotional purposesIn addition to processing your data to process your purchase from Nebulus GmbH, we also use your data to communicate with you about your orders, specific products or marketing campaigns and to recommend products or services that may be of interest to you.
You can object to the use of your personal data for advertising purposes at any time, either in whole or for individual measures, without incurring any costs other than the transmission costs according to the basic rates. A communication in text form to the contact data mentioned under item 1 (e.g. e-mail, fax, letter) is sufficient for this purpose.
2.1 Individual advertising for youInformation that we receive from you helps us to permanently improve your shopping experience and to make it customer-friendly and individual for you. The information you provide and which is automatically generated is used to create advertising tailored to you and your interests. We use existing information for this purpose, such as confirmations of receipt and reading of e-mails, information about your computer and connection to the Internet, operating system and platform, your order history, your service history, date and time of your visit to the homepage, products you have viewed.
We use this information exclusively in pseudonymised form. By analysing and evaluating this information, it is possible for us to improve our websites and our Internet offer, as well as to send you individual advertising. This means advertising that recommends products that might actually interest you. Our aim is to make our advertising more useful and interesting for you. Therefore, the evaluation and analysis of the pseudonymised data collected from you helps us to ensure that we do not send you advertising indiscriminately. Rather, we send you advertising, such as newsletters, product recommendations, by e-mail or letter advertising, which correspond to your areas of interest. In this respect, we also compare, for example, which of our advertising e-mails you open in order to avoid sending unnecessary e-mails to you.
I agree that Nebulus GmbH may use the data provided by me and other information stored on my customer account, as well as pseudonymised usage data, to present me with personalised advertising and/or special offers and services.
If you do not wish to receive personalised advertising, you can object to this at any time, either in full or for specific measures. A notification in text form to the contact details mentioned under point 1 (e.g. e-mail, fax, letter) is sufficient for this purpose.
2.2 Competitions, market and opinion researchIn the case of competitions, we use your data for the purpose of prize notification and advertising for our offers. Detailed information can be found, where applicable, in our conditions of participation for the respective competition.
We also use your data for market and opinion research. Of course, we use this exclusively anonymously for statistical purposes and only for Nebulus GmbH. Your answers in surveys will not be passed on to third parties or published. We do not store the answers from our surveys together with your e-mail address or other personal data.
I consent to Nebulus GmbH processing and using my personal data for market and opinion research for its own purposes.
You can object to the use of data for market and opinion research at any time, either in full or for specific measures, without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the contact details given under point 1 (e.g. e-mail, fax, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every survey e-mail.
Automatically stored data
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
This data is not merged with other data sources. The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.
For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user. The data is also processed in anonymised form for statistical purposes; it is not compared with other data or passed on to third parties, even in extracts. Only within the framework of our server statistics, which we publish every two years in our activity report, is a presentation of the number of page views made.
2. CookiesAccepting cookies is not a prerequisite for visiting our websites. However, we would like to point out that the use of the shopping cart function and the ordering of products is only possible if you allow us to set cookies.
What are cookies?
Cookies are small files that are stored on your data carrier and save certain settings and data for exchange with our system via your browser. Basically, we distinguish between 2 different types of cookies, so-called session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your data carrier for a longer period or indefinitely. This storage helps us to design our websites and our offers for you accordingly and makes it easier for you to use them, for example by storing certain entries you make so that you do not have to keep repeating them.
Which cookies does Nebulus GmbH use?
What data is stored in the cookies?
No personal data is stored in the cookies used by Nebulus GmbH. The cookies we use are therefore not assignable to a specific person and therefore not to you. When the cookie is activated, an identification number is assigned to it. An assignment of your personal data to this identification number is not possible at any time and will not be made. Your name, your IP address or similar data that would enable the cookie to be assigned to you are not recorded at any time. Based on the cookie technology, we only receive pseudonymised information, for example, about which pages of our shop were visited, which products were viewed, etc.
What is onsite targeting?
On the Nebulus GmbH websites, data is collected on the basis of cookie technology to optimise our advertising and the entire online offer. This data is not used to identify you personally, but is used solely for a pseudonymous evaluation of the use of the homepage. At no time will your data be merged with personal data stored by us. This technology allows us to present you with advertisements and/or special offers and services, the content of which is based on the information obtained in connection with the clickstream analysis (for example, advertisements that focus on the fact that only sports shoes have been viewed in the last few days). Our aim here is to make our online offer as attractive as possible for you and to present you with advertising that corresponds to your areas of interest.
Are there also cookies from third-party providers (so-called third-party cookies)?
Nebulus GmbH uses some advertising partners who help to make the internet offer and the websites more interesting for you. Therefore, cookies from partner companies are also stored on your hard drive when you visit the websites. These are temporary/permanent cookies that are automatically deleted after the specified time. These temporary or permanent cookies (lifetime 14 days to 10 years) are stored on your hard drive and delete themselves after the specified time. The cookies of our partner companies also do not contain any personal data. Data is only collected pseudonymously under a user ID. This is, for example, data about which products you have looked at, whether something has been bought, which products have been searched for, etc. The cookies do not contain any personal data. Some of our advertising partners also collect information beyond the web pages about which pages you have previously visited or which products you were interested in, for example, in order to be able to show you advertising that best matches your interests. This pseudonymous data is never combined with your personal data. Their sole purpose is to enable our advertising partners to address you with advertising that might actually interest you.
Our websites use so-called re-targeting technologies. We use these technologies to make our website more interesting for you. This technology makes it possible to address internet users who have already shown interest in our shop and our products with advertising on the websites of our partners. We are convinced that the display of personalised, interest-related advertising is usually more interesting for the Internet user than advertising that has no such personal reference. The display of these advertisements on the pages of our partners is based on cookie technology and an analysis of previous user behaviour. This form of advertising is completely pseudonymous. No personal data is stored and no usage profiles are merged with your personal data.
I consent to the use of so-called cookies and thus to the collection, storage and use of my usage data. Furthermore, I consent to my data being stored in cookies beyond the end of the browser session and, for example, being retrieved the next time I visit the website. I can revoke this consent at any time with effect for the future by refusing to accept cookies in my browser settings.
How can I prevent the storage of cookies?
In your browser, you can set that cookies are only accepted if you agree to this. If you only want to accept the Nebulus GmbH cookies but not the cookies of our service providers and partners, you can select the setting in your browser "Block third-party cookies".
As a rule, the help function in the menu bar of your web browser will show you how to reject new cookies and switch off those you have already received. Detailed information on how to make the settings in the browser you are using can be found under the following link.
We recommend that for shared computers that are set to accept cookies and Flash cookies, you always log out completely when finished.
USE OF GOOGLE SERVICES. We use the technologies set out below provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision of the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.
GOOGLE TAG MANAGERThis website uses Google Tag Manager. The Tag Manager does not collect any personal data. The tool provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. Google's privacy notice for this tool can be found here: https://www.google.com/analytics/terms/tag-manager/.
FACEBOOK PIXEL. We use the Facebook Pixel as part of the technologies of Facebook Ireland Ltd [https://de-de.facebook.com/facebookdublin/]., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook") set out below. The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter), from which usage profiles are created using pseudonyms. For this purpose, a cookie is automatically set by the Facebook Pixel when you visit our website, which automatically enables recognition of your browser when visiting other websites by means of a pseudonymous CookieID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website use, in particular personalised and group-based advertising. We have no influence on the data processing by Facebook and only receive statistics compiled on the basis of Facebook Pixel.
Google RemarketingThis feature is used to present interest-based advertisements to website visitors within the Google advertising network. The technology allows us to serve automatically generated, targeted ads after your visit to our website. The ads are based on the products and services you clicked on the last time you visited our website. For this purpose, a so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he or she visits websites that belong to Google's advertising network. Cookies are small text files that are stored in your browser when you visit our website. Google usually stores information such as your web request, IP address, browser type, browser language, date and time of your request. This information is used to associate the web browser with a specific computer. On the pages of the Google advertising network, the visitor can then be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.
Google AnalyticsGoogle Analytics is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information collected by the cookie about the use of our website (including your IP address) is usually transmitted to a Google server in the USA and stored there. We would like to point out that the code "gat._anonymizeIp();" has been added to Google Analytics on our websites in order to ensure anonymised collection of IP addresses (so-called IP masking). At our instigation, your IP address is therefore only recorded by Google in shortened form, which ensures anonymisation and does not allow any conclusions to be drawn about your identity. In the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google further observes the data protection provisions of the "US Safe Harbor" agreement and is registered with the "Safe Harbor" programme of the US Department of Commerce. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. A transfer of this data by Google to third parties only takes place on the basis of legal regulations or within the framework of commissioned data processing. Under no circumstances will Google merge your data with other data collected by Google.
You can find more information on Google Analytics and data protection at
3. Social media.
https://developers.facebook.com/docs/plugins When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button or posting a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends. The settings options offered by Facebook to protect the privacy of the data subject are explained at https://de-de.facebook.com/about/privacy/.
4. Payment providers.
Instant bank transferOn our website, components of Sofortüberweisung are integrated. Sofortüberweisung is a payment service that enables cashless payment for products and services on the Internet. Sofortüberweisung represents a technical procedure through which the online merchant immediately receives a payment confirmation. This enables a merchant to deliver goods, services or downloads to the customer immediately after the order is placed. The operating company of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany. If the data subject selects "Sofortüberweisung" as a payment option during the ordering process in our online shop, data of the data subject will be automatically transmitted to Sofortüberweisung. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing. During the purchase transaction via Sofortüberweisung, the buyer transmits the PIN and the TAN to Sofort GmbH. Sofortüberweisung then carries out a transfer to the online merchant after a technical check of the account balance and retrieval of further data to check the account coverage. The online merchant is then automatically notified of the execution of the financial transaction. The personal data exchanged with Sofortüberweisung are first name, surname, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The purpose of the transfer of the data is payment processing and fraud prevention. The controller will also transmit other personal data to Sofortüberweisung if there is a legitimate interest for the transmission. The personal data exchanged between Sofortüberweisung and the controller may be transmitted by Sofortüberweisung to credit reference agencies. The purpose of this transmission is to check identity and creditworthiness. Sofortüberweisung may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary for the fulfilment of contractual obligations or the data is to be processed on behalf. The data subject has the option of revoking consent to the handling of personal data at any time vis-à-vis Sofortüberweisung. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing. The applicable data protection provisions of Sofortüberweisung can be found at https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/.
Amazon PayThe Amazon Payments payment method allows customers to use their payment data and specified payment methods stored at Amazon.co.uk to also pay in our online shops via their Amazon account. If the Amazon Payments payment method is selected, the payment is processed directly via the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg. If the customer selects "Amazon Payments" as a payment method during the online ordering process, he must first log in with his Amazon account details. Amazon Payments uses the information from the customer's Amazon account to first identify the customer and then to process the payment. Incidentally, when paying via Amazon Payments, the terms and conditions as well as the data protection provisions of Amazon Payments Europe S.C.A. apply. These can be found on the website https://payments.amazon.de.
Security. We have put in place technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorised access. All our employees and service providers working for us are bound by the applicable data protection laws.
Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process and our data protection statements are constantly being revised. Please ensure that you have the latest version.
Rights of data subjects. You have a right to information, correction, deletion or restriction of the processing of your stored data at any time, a right to object to the processing as well as a right to data portability and to lodge a complaint in accordance with the requirements of data protection law.
Right to information:You can request information from us as to whether and to what extent we process your data.
Right to rectification:If we process your data that is incomplete or incorrect, you can request that we correct or complete it at any time.
Right to erasure:You can ask us to erase your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests in protection. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of legally regulated retention obligations.
Irrespective of the exercise of your right to deletion, we will delete your data immediately and completely, insofar as there is no legal or statutory retention obligation to the contrary.
Right to restriction of processing:You may request us to restrict the processing of your data if.
Right to data portability:You may request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format and that you may transfer that data to another controller without hindrance from us, provided that
If technically feasible, you may request us to transfer your data directly to another controller.
Right of objection:If we process your data for legitimate interest, you can object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the assertion, exercise or defence of legal claims. You may object to the processing of your data for the purpose of direct marketing at any time without giving reasons.
Right of complaint:If you are of the opinion that we are violating German or European data protection law when processing your data, please contact us so that we can clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for you, the respective state office for data protection supervision.
If you wish to assert any of the aforementioned rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.
All interested parties and visitors to our website can contact us on data protection issues at:
Mr Thomas Wanjura
Project 29 GmbH & Co. KG
Tel.: 0941 2986930
Fax: 0941 29869316