• Personal data
“Personal data” is information that relates to an identified or identifiable natural person (hereby referred to as “data subject”). An individual is considered as being “identifiable”, either directly or indirectly, when they can be determined by an identifier such as a name, an identification number or location data, online identification data or one or more distinguishing features that could identify the physical, physiological, genetic, psychological, economic, cultural or social identity of that person.
• Data subject
A person is considered a “data subject” when their personal data is processed by the controller.
“Processing” refers to the procedures that, with or without the help of automated operations, are carried out in relation to personal data, for example the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Restriction of processing
“Restriction of processing” is the marking of stored personal data with the aim of limiting their processing in the future.
“Profiling” means the automated processing of personal data which serves to evaluate, analyse or predict aspects relating to a natural person (in particular, with respect to performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements).
“Pseudonymisation” is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
• Controller or data controller
A “controller” or “data controller” is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
A “processor” is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
A “recipient” is a natural or legal person, public authority, agency or body, to which the personal data are disclosed, whether a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
• Third Party
A “third party” is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and any persons who, under the direct authority of the controller or processor, are authorised to process personal data.
“Consent” is any freely given specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of his or her personal data.
2. Name and address of the data controllerMr Alexander Scharnböck
Mettener Str. 21
94469 Deggendorf, Germany
Fax: +49 991 280 917 - 71
Tel: +49 991 280 91 774
Name and address of the data protection officer
Mr Bernhard Danninger
Mettener Str. 21
94469 Deggendorf, Germany
Tel: +49 991/28091774
3. Collection of data and legal basis for processingCollection of general data and information
When accessing our website, information of a general nature will be automatically recorded. This information (“server log files”) includes the type of internet browser, the operating system used, the domain name of your internet service provider and similar information. Inference to your person by means of this data is not possible. This information is technically necessary in order to show the website content requested by you and is mandatory when using the internet. Anonymous information of this kind will be statistically evaluated by us in order to improve our website and the technology behind it.
Upon accessing our website, the following information will be collected and saved:
• IP address of your PC
• Date of access
• Name and URL of the data accessed
• HTTP Referer
• Browser/operating system/access provider
The collection and storage of this data serves the following purposes:
• Establishing a connection with the website
• Technical use of the website
• System security
Data processing is carried out pursuant to Art. 6 par. 1 s. 1 lit. f GDPR.
This website uses an SSL or TLS cryptographic protocol for security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or queries for the controller). You can recognise an encrypted connection by the character sequence “https://” and the lock symbol in your browser line.
Registration and orders on our website
If you register at our website or create a user account, your personal data will also be collected. Please note that although registration may provide further access to our website content, it is not a mandatory requirement for the use of our website. The personal data which is then transmitted to the controller results from the input masks used for the registration. The personal data entered by the data subject will be collected and saved exclusively for internal use by the controller and for internal purposes. The controller can transfer the data to one or more processors, for example a parcel service who will deliver to you via post, who will use the personal data exclusively for internal purposes ascribed to the data controller.
During the registration process on our website, the following personal data will be collected from you and then saved by us:
• Name and address
• Email address
• Telephone number
The purpose of the collection and storage of data is:
• Customer identification
• Processing of the order and for correspondence with you
• For the processing of possible existing liability claims, as well as for the enforcement of possible claims against you
• Technical administration of the website
Your consent will be obtained during the order process before the processing of this data.
Data processing is carried out pursuant to Art. 6 par. 1 s. 1 lit. b GDPR.
If you voluntarily subscribe to our newsletter (regular promotional emails with offers or other information from our company), the data you provide will be used exclusively for this purpose and will not be shared with third parties.
This also includes information which is relevant for the service or registration. The validity of the email address will be checked using the “double opt-in” procedure. Upon subscription to the newsletter, a confirmation email will be sent and the answer will be checked. No other data is collected.
You may unsubscribe from the newsletter (withdrawal of consent) at any time by means of an email sent to the subsequent contact information or by following the relevant link provided in the newsletter. Your cancellation will not incur any further costs above the regular communication costs (e.g. costs of a telephone call). The processing of data based on your consent is carried out in accordance with Art. 6 par. 1 s. 1 lit. a GDPR.
Mailing of the newsletter
We reserve the right to regularly send emails with offers regarding goods or services in our product range which are similar to those already purchased. Pursuant to § 7 par. 3 UWG we are not required to obtain any separate consent from you for this. The data processing occurs on the basis of our legitimate interests in personalised direct advertising pursuant to Art. 6 par. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send such emails. You are entitled to object to the use of your e-mail address for the purpose described above at any time with effect for the future by sending a message to the responsible person named at the start of this document. For this purpose, you only have to pay costs of communication according to the basic rates. After receipt of your objection, your email address will be removed from the mailing list.
Contact options via the website
If you send us a query via the contact form or via email, your entries into the query form or the email, including the contact details provided by you, will be stored by us for the purpose of processing the request and/or contacting the data subject. We do not give this data to third parties. The legal basis for the processing of the data is our legitimate interests in answering your query in accordance with Art. 6 par. 1 lit. f GDPR. If the reason for contacting is the conclusion of a contract, then the additional legal basis for processing is Art. 6 par. 1 lit. b GDPR. The processing of data based on your consent is carried out in accordance with Art. 6 par. 1 s. 1 lit. a GDPR. The personal data collected for the use of the contact form will be automatically deleted after your query has been dealt with. You have the right to withdraw your consent to the processing of data at any time.
Comment function on the website blog
When commenting on our website, the chosen username will also be recorded and saved, so that unlawful content can be tracked for our exculpation.
4. Storage PeriodWe will save the personal data collected and transmitted to us for the processing of your order until the expiration of the statutory storage requirements. We will subsequently delete your data, unless, in accordance with Art. 6 par. 1 s. 1 lit. c GDPR we are required to store and record the data longer due to tax and commercial law (HGB - commercial code, StGB - penal code, or AO - fiscal code) or you have given your consent for the storage, in accordance with Art. 6 par. 1 s. 1 lit. a GDPR.
5. Obligation of provision - possible consequences of non-provisionThe provision of personal data is partly required by law (tax law) or may result from contractual arrangements (transparency of the contracting party). Failure to provide personal data would prevent the conclusion of the contract and therefore does not occur. Any information about the legally or contractually required provision of personal data is provided to you by the controller.
6. Existence of automated decision-makingWe do not use automated decision-making or profiling.
7. Routine deletion and blocking of personal dataIf the storage period, explained in more detail in 5., has expired, the personal data will be routinely deleted.
8. Rights of the data subjectAs a data subject you have the following rights:
• Art. 15 GDPR: You have the right to request access to your personal data processed by us. In particular, you can request access to information about the purposes of the processing; categories of personal data; the categories of recipients to who your personal data has been or will be disclosed; the planned storage period; the existence of the right to rectification, erasure, restriction of processing, or objection; the existence of the right to lodge a complaint; the source of the data, if this was not collected by us; the existence of automatic decision-making including profiling and, if applicable, significant information about the details of this;
• Art. 16 GDPR: You have the right to request the rectification or completion of inaccurate personal data saved by us;
• Art. 17 GDPR: You have the right to request the erasure of your personal data saved by us, as long as the data is not required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• Art. 18 GDPR: You have the right to request the restriction of processing of your personal data in the following cases: you contest the accuracy of the data; the processing is unlawful but you oppose the erasure of the data and we no longer need the data but you require this data for the establishment, exercise or defence of legal claims; or, pursuant to Art. 21 GDPR, you have objected to its processing;
• Art. 20 GDPR: You have the right to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
• Art. 7 par. 3 GDPR: You have the right to withdraw your consent to processing of data. This means that we may not proceed with any data processing based on this consent in the future;
• Art. 77 GDPR: You have the right to lodge a complaint regarding the processing of data with a supervisory authority in the Member State of your habitual residence, place of work or of our head office.
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Disabling cookies may limit the functionality or display of our website.
10. Social MediaFacebook
Our website includes the integration of the social plugins (“plugins”) from the social network Facebook, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be identified by a Facebook logo or the term “Facebook Social Plugin”. You can find an overview about Facebook plugins and what they look like here: https://developers.facebook.com/docs/plugins When you activate a page of our website containing such a plugin, the browser sets up a direct connection to the Facebook servers. The content of the plugin is transmitted from Facebook directly to your browser and embedded in the webpage. Through this connection Facebook receives the information that your browser has accessed the relevant page of our website, even if you do not have a Facebook profile or are not logged in to Facebook at that time. This information (including your IP address) is transmitted from you browser directly to a Facebook server in the USA and is saved there. If you are logged in to Facebook, Facebook can immediately assign the visit to our website to your Facebook profile. If you interact with the plugins, e. g. click on the “Like” button or post a comment, such information is directly submitted to a Facebook server by your browser and is saved there. In addition, the information is published on your Facebook profile and displayed to your Facebook friends.
You can find more information regarding the configuration options offered by Facebook for the protection of privacy of the data subject by using the following link: https://www.facebook.com/about/privacy/.
Our website includes the integration of social plugins (“plugins”) from Instagram, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are identified by an Instagram logo, such as the “Instagram camera”. An overview of the Instagram plugins and what they look like can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges When you activate a page of our website containing such a plug-in, your browser sets up a direct connection to the Instagram servers. The content of the plugin is transmitted from Instagram directly to your browser and embedded in the webpage. Through this connection Instagram receives the information that your browser has accessed the relevant page of our website, even if you do not have an Instagram profile or are not logged in to Instagram at that time. This information (including your IP address) is transmitted from you browser directly to an Instagram server in the USA and is saved there. If you are logged in to Instagram, Instagram can immediately assign the visit to your Instagram account. If you interact with the plugins, e. g. click on the “Instagram” button, such information is directly submitted to an Instagram server by your browser and is saved there. In addition, the information is published on your Instagram account and displayed to your contacts. If you do not want the information about your web activity to be immediately assigned to your Instagram account, you must log out of Instagram before visiting our website. You may also block the execution of Instagram plugins with Add-Ons for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/).
Our website includes the integration of social plugins (“plugins”) of the microblogging platform Twitter, operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). The plugins are identified by a Twitter logo, for example in the form of a blue “twitter bird”. When you activate a page of our website containing such a plugin, the browser sets up a direct connection to the Twitter servers. The content of the plugin is transmitted from Twitter directly to your browser and embedded in the webpage. Through this connection Twitter receives the information that your browser has accessed the relevant page of our website, even if you do not have a Twitter profile or are not logged in to Twitter at that time. This information (including your IP address) is transmitted from your browser directly to a Twitter server in the USA and is saved there. If you are logged in to Twitter, Twitter can immediately assign the visit to your Twitter account. If you interact with the plugins, e. g. click on the “Twitter” button, such information is directly submitted to a Twitter server by your browser and is saved there. In addition, the information is published on your Twitter account and displayed to your contacts. Please refer to Twitter's privacy information regarding the purpose and extent of data collection and further processing and use of the data by Twitter, as well as to the rights and setting options connected therewith in order to protect your privacy: https://twitter.com/privacy If you do not want the information about your web activity to be immediately assigned to your Twitter profile, you must log out of Twitter before visiting our website. You may completely block the download of Twitter plugins with Add-Ons for you browser, e.g. with the script blocker “NoScript” (http://noscript.net/).
Our website includes the integration of YouTube. This is an internet video portal that allows video publishers to publish video clips free of charge and allows other users to view, rate and comment on these videos at no cost. YouTube allows the publication of all types of video, as a result of which complete films and television programmes, music videos, trailers, or videos created by users can be retrieved via the internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary company of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
When you visit one of our pages equipped with a YouTube plug-in, a connection is established with the YouTube servers. The YouTube servers are thus informed which particular pages of our website you have visited. When logged into your YouTube account you enable YouTube to directly associate your surfing behaviour with your personal profile. You can prevent this possible association by logging out of your account beforehand. Further information regarding the collection and use of your data via YouTube may be found in YouTube’s information about data protection at www.youtube.com
Our website may use social plugins (“plugins”) of the LinkedIn social network, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The plugins are identifiable through a LinkedIn logo or with the phrase “LinkedIn Social Plugin”. When you access a Nebulus GmbH webpage containing such a plugin, clicking on the icon creates a direct link to the LinkedIn servers. The content of the plugin is directly transmitted from LinkedIn to your browser and embedded in the webpage. By embedding the plugins, LinkedIn receives the information that you have accessed a particular page on our website. If you are logged in to LinkedIn, LinkedIn can allocate the visit to your LinkedIn account. If you interact with the plugins, e. g. make a comment, such information is directly submitted to LinkedIn by your browser and is saved there. Please refer to LinkedIn's privacy information regarding the purpose and extent of data collection and further processing and use of the data by LinkedIn, as well as to the rights and setting options connected therewith in order to protect your privacy: http://www.linkedin.com/legal/privacy-policy. If you do not wish LinkedIn to collect data about you by means of our website, you must log out of LinkedIn before visiting our website.
This website uses the Tumblr platform’s buttons. These buttons are provided by Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA, https://www.tumblr.com/support. They can be identified by the term “Tumblr”. Through the use of these buttons it is possible to share a post or page of this website or to follow this vendor on Tumblr.
11. Online MarketingDoubleClick by Google
This website uses the online marketing tool DoubleClick by Google, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").
In addition, DoubleClick uses cookie IDs to track conversions related to ad requests. For instance, if a user sees a DoubleClick ad and later goes to the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information.
Because of the marketing tools used, your browser automatically creates a direct connection with the Google server. We have no influence over the extent and the further use of the data collected by Google via the use of this tool and inform you hereafter of our knowledge regarding this: The integration of DoubleClick enables Google to receive the information that you have accessed the corresponding part of our website or have clicked on one of our ads. Provided that you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible for the provider to find out and save your IP address.
If you wish to object to the participation in this tracking process, you may deactivate the cookies used for conversion tracking by adjusting your browser settings so that cookies from the domain www.googleadservices.com are blocked, https://www.google.de/settings/ads. However, this setting will be deleted if you delete your cookies. Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to find out about the implementation of cookies and make related adjustments. Finally, you can adjust your browser settings so that you are informed about the implementation of cookies and can decide to allow them on an individual basis or block the acceptance of cookies for certain cases or in general. Disabling cookies may limit the functionality of our website.
Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection required in the EU.
This website uses Google AdSense, a web advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google AdSense uses "DoubleClick DART Cookies" ("Cookies"). These are text files which are stored on your computer to enable an analysis as to how you use the site. In order to collect information Google AdSense also uses “Web Beacons” (small invisible graphics); these allow simple actions such as visitor traffic to the website to be recorded, gathered and analysed. As a general rule, the information collected by the cookies and/or Web Beacons about your use of the website (including your IP address) will be transmitted to a Google server in the United States and saved there.
Google uses the information received in this way to analyse your user behaviour with regard to the AdSense advertisements. The IP address transmitted by your browser for the scope of Google AdSense will not be linked with any other data held by Google. Google may transfer this information to a third party, provided that this is required by law and/or a third party handles this data on behalf of Google.
The data processing described above is carried out pursuant to Art. 6 par. 1 lit. f GDPR for the purpose of targeted advertising for the user by advertising third parties, whose ads are displayed based on the evaluation of user behaviour on this website. In this sense, processing serves our financial interest in exploiting the economic potential of our website by displaying personalised third-party content for a fee.
Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection required in the EU.
You can permanently deactivate advertising cookies through the relevant browser software settings or by downloading and installing the browser plug-in via this link:
Please be aware that disabling cookies may prevent or limit the use of certain functions of this website.
Our website includes the integration of the Google Ads service. This is an internet advertising service that allows advertisers to place ads both on Google’s search engine and on the Google Display Network. Google Ads allows an advertiser to pre-set keywords that will display an ad on Google's search engine results only when the user retrieves a keyword-related search result via the search engine. In the Google Network, ads are allocated to subject-relevant websites using an automated algorithm and according to pre-defined keywords.
Furthermore, the data subject has the option to object to Google's interest-based advertising. To do this, the person concerned must access the link www.google.com/settings/ads from each of the Internet browsers they use and adjust the desired settings there.
Google Analytics (with anonymisation)
12. Payment processingPayPal or Skrill
Components of PayPal/Skrill are integrated into our website. PayPal/Skrill is an online payment provider. Payment will be processed via accounts which represent virtual private or business accounts. In addition, PayPal/Skrill offers the possibility to process virtual payments via credit cards if a user does not have an account. An account is managed via an e-mail address, which is why there is no classic account number. PayPal/Skrill makes it possible to initiate online payments to third parties or to receive payments. PayPal/Skrill acts as an intermediary and offers buyer protection.
The European operating company for PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxemburg.
The operating company for Skrill is Skrill Limited, Floor 27, 25 Canada Square, London, E14 5LQ, United Kingdom.
If you use this payment option, we will pass on the personal data necessary for payment processing to PayPal/Skrill. In general, the extent of the personal data passed on is: first name, last name, address, email address, IP address, telephone number, mobile telephone number or other data that is necessary to process payments. In order to execute the purchase agreement, personal data which are associated with the relevant order are also necessary.
The transmission of data to PayPal/Skrill as described in this section only takes place when you select this payment method.
Components of Sofortüberweisung are integrated into our website. Sofortüberweisung is a payment provider, that enables cashless payment for products and services over the internet. Sofortüberweisung is a technical process, through which the online retailer receives immediate confirmation of payment. This enables a merchant to deliver goods, services or downloads to the customer immediately after ordering.
The operating company of Sofortüberweisung is SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.
Should the data subject choose the payment method “Sofortüberweisung” during the order process in our online shop, automated data regarding the data subject will be transmitted to Sofortüberweisung. By choosing this payment option, the data subject consents to the transmission of personal data necessary for payment processing.
During the checkout process via Sofortüberweisung, the buyer transmits the PIN and TAN to Sofort GmbH. After a technical check of the account balance and retrieval of further data to check the account funds, Sofortüberweisung executes a transfer to the online retailer. The seller will then be automatically informed of the completion of the financial transaction.
The personal data exchanged with Sofortüberweisung are name, surname address, email address, IP address, telephone number, mobile telephone number, or other data which is necessary to process the payment. Data is transmitted for the purposes of payment processing and fraud prevention. The data controller will send further personal data to Sofortüberweisung if a legitimate interest for the transmission is given. The personal data exchanged between the data controller and Sofortüberweisung may be transmitted to credit agencies. The purpose of this transmission is the identity and credit check.
Sofortüberweisung may disclose personal information to affiliates and service providers or subcontractors, if it is necessary to fulfill its contractual obligations or if processing the data on instruction.
The data subject has the right to revoke consent for the handling of personal data by Sofortüberweisung at any time. A revocation of consent does not apply to personal data which must be processed, used or transmitted for the contractual processing of payments.
The payment method Amazon Payments allows customers to use their payment details and forms of payment from Amazon.co.uk in our online shop so that they may pay via their Amazon account.
When selecting the payment method Amazon Payments, the payment processing is carried out directly by the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxemburg. Should the customer choose “Amazon Payments” as the payment method during the order process, he or she must then sign in to his or her Amazon account. Amazon Payments uses information from the customer’s Amazon account for initial identification and to subsequently carry out the payment process.