Datenschutz und Haftungshinweise

---

English Version

Welcome to our website and thank you for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with applicable personal data protection legislation, in particular the GDPR and our country-specific implementation laws. With this privacy policy, we provide comprehensive information about the processing of your personal data by Company EDUPLAY GmbH and your rights.

Personal data is any information that makes it possible to identify a natural person. This includes, in particular, your name, date of birth, address, telephone number, email address and IP address.

Anonymous data is available if no personal reference to the individual/user can be made.

Responsible body and data protection officer

Address:	EDUPLAY GmbH Eichhofweg 11 96450 Coburg Germany
Contact information:	Telephone: +49 (0) 9561 23 99 3-0 Fax: +49 (0) 9561 23 99 3-20 E-Mail: info@eduplay.de

Contact info of the data protection officer:
privacy@eduplay.de


Your rights as a data subject

We would first like to notify you of your rights as a data subject. These rights are set out in Articles 15 - 22 GDPR, and include:The right of access (Art. 15 GDPR),

• The right to erasure / right to be forgotten (Art. 17 GDPR),
• The right to rectification (Art. 16 GDPR),
• The right to data portability (Art. 20 GDPR),
• The right to restriction of data processing (Art. 18 GDPR).
• The right to object to data processing (Art. 21 GDPR).

To exercise these rights, please contact: privacy@eduplay.de. The same applies if you have any questions regarding data processing in our company or when you withdraw your consent. You also have a right of appeal to the relevant data protection supervisory authority.


Right to object

Please note the following with respect to your right to object: 

When we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing the reasons for such objection. This also applies to profiling insofar as it is associated with direct marketing. If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to: privacy@eduplay.de. Should we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling based on these provisions. We will then cease to process your personal information unless we can demonstrate compelling legitimate grounds for processing such information that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

Purposes and legal bases of data processing

The processing of your personal data complies with the provisions of the GDPR and all other applicable data protection regulations. Legal bases for data processing arise in particular from Art. 6 GDPR.

We use your data to initiate business, to fulfil contractual and legal obligations, to conduct the contractual relationship, to offer products and services and to consolidate customer relationships, which may include marketing and direct marketing. In concrete terms, we store your data for the fulfillment of your order, for the creation of a delivery note, invoice, shipping documents, traceability of your delivery, payment history, possible reminder procedure, warranty fulfillment in the event of a complaint and reverse orders.

Your consent also constitutes a data protection regulation. In this respect, we will inform you of the purposes of data processing and the right to withdraw your consent. If the consent also relates to the processing of special categories of personal data, we will explicitly notify you in the consent process (Art. 88 (1) GDPR in connection with § 26 (3) BDSG).

Processing of special categories of personal data within the meaning of Art. 9 (1) GDPR may only take place where necessary on the grounds of legal regulations and there is no reason to assume that your legitimate interests should prevail to the exclusion of processing such data. (Art. 88 (1) GDPR in connection with § 26 (3) BDSG)


Data transfers / Disclosure to third parties

We will only transmit your data to third parties within the scope of given statutory provisions or based on consent. In all other cases, information will not be transferred to third parties unless we are obliged to do so owing to mandatory legal regulations (disclosure to external bodies, including the supervisory authorities or law enforcement authorities).


Data recipients / categories of recipients

In our organisation, we ensure that only individuals who are required to process the relevant data to fulfil their contractual and legal obligations are authorised to handle personal data.

In many cases, service providers assist our specialist departments to fulfil their tasks. The necessary data protection contract has been concluded with all service providers. Supporting service providers are the transport services DHL and DPD, as well as contracted shipping companies, for payment HypoVereinsbank Coburg UniCredit Bank AG, People's and Raiffeisenbank Coburg eG, bank Max Flessa Coburg and PayPal, for debt collection and credit check Bürgel Coburg.


Transfers of personal data to third countries

A transfer of data to third countries (outside the European Union or the European Economic Area) shall only take place if required by law or if you have provided your consent for such a transfer.


Period of data storage

We store your data for as long as such is required for the relevant processing purposes. Please note that numerous retention statutory periods require that data must be stored for a specific period of time. This relates in particular to retention obligations for commercial or fiscal purposes (e.g. commercial code, tax code, etc.). The data will be routinely deleted after use unless a further period of retention is required.

We may also retain data if you have given us your permission to do so, or in the event of any legal disputes and we use the evidence within the statutory limitation period, which may be up to 30 years; the standard limitation period is 3 years.


Secure transfer of data

We implement the appropriate technical and organisational security measures to ensure the optimal protection of the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.

The data exchange to and from our website is encrypted. We provide https as a transfer protocol for our website, and always use the current encryption protocols (SSL - classic certificate). In addition, we offer our users content encryption in our contact forms and applications. We alone can decrypt this data. It is also possible to use alternative communication channels (e.g. by post or by fax).


Obligation to provide data

A range of personal data is required to establish, implement and terminate the obligation and the fulfilment of the relevant contractual and legal obligations. The same applies to the use of our website and the various functions we provide.

We have summarised the relevant details in the above point. In some cases, legal regulations require data to be collected or made available. Please note that it will not be possible to process your request or execute the underlying contractual obligation without this information.


Data categories, sources and origin of data

The data we process is defined by the relevant context: it depends on whether, for example, you place an order online, enter a request on our contact form or if you want to send us an application or submit a complaint.

Please note that we may also provide information at specific points for specific processing situations separately where appropriate, e.g. when uploading application documents or when making a contact request.

We collect and process the following data when you visit our website:

• Name of the Internet service provider
• Information on the website from which you visited us
• Web browser and operating system used
• The IP address by your allocated Internet service provider
• Files accessed, volume of data transferred, downloads/file export
• Information on websites accessed on our site, including date and time
• For reasons of technical security (in particular to safeguard against attempts to attack of our web server), this data is stored in accordance with Article 6 (1) lit f GDPR.

We collect and process the following data as part of a contact request:

• Title
• First Name
• Last Name
• Company
• Street
• Post Code
• City
• Phone
• E-Mail
• Your message

We process the following data as part of the ordering process:

• Title
• Last Name, first name
• Delivery address
• Invoice address
• E-Mail
• Sales Tax Identification Number
• Type and time of first contact
• Industrial sector
• Tax payer's account number
• Trade license if necessary
• SEPA direct debit direct debit authorization if necessary
• Data that may be legitimately processed from other / external sources
• For statistical purposes, we use your order in our ERP system

We collect and process the following data for newsletters:

• E-Mail
• Title
• First name
• Last name
• For statistical purposes, we use your order based on a newsletter in our ERP system

Automated decisions in individual cases

We do not use purely automated processing to make decisions.


Cookies (Art. 6 (1) lit. f GDPR / Art. 6 (1) lit a GDPR with consent)

Our website uses “cookies” at various locations, which serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser (locally on your hard disk).

Cookies enable us to analyse how users use our websites so we can design the website content in accordance with the visitor’s needs. Cookies also allow us to measure the effectiveness of a particular ad and, for example, to place it based on the user's interests.

Most of the cookies we use are "session cookies", which will be automatically deleted after your visit. Persistent cookies are automatically deleted from your computer when their validity period (generally six months) has expired or you delete them yourself prior to expiry.

Most web browsers automatically accept cookies. You can generally change your browser's settings if you prefer not to send the information. You can still use the offers on our website without restrictions (exception: configurators).

We use cookies to make our offers more user-friendly, effective and secure. We also use cookies to analyse how users use our websites so we can design the website content in accordance with the visitor’s needs. Cookies also allow us to measure the effectiveness of a particular ad and, for example, to place it based on the user's interests.

Cookies are stored on the user’s computer which then transmits them to us. As a user, you therefore exercise full control over the use of cookies. You can change the settings in your Internet browser to disable or restrict the sending of cookies. In addition, cookies that have already been saved on your computer can be deleted at any time via an Internet browser or other software programs. All this is possible in all the current Internet browsers.

Please note: If you deactivate the placing of cookies on your device, you may not be able to access all our website functions in certain circumstances.


User profiles / Web tracking

We do not use analysis programs and other techniques to evaluate your usage behavior on our website.


Social Plugins

We do not use social plugins on our social networks. Only the Facebook logo with link to our Facebook page is included. This logo with link does not collect any data in advance. Only when you click on the logo/link will you be forwarded to Facebook and only then, if necessary, personal data will be collected by www.facebook.com/de.


Using Google Maps

On our website we use Google Maps (API) from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps to provide geographic information. The use of this service will show you our location and make it easier to get there.

When you visit any of the subpages where the Google Maps map is incorporated, information about your use of our website (such as your IP address) is transmitted to Google's servers in the United States and stored there. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data (even for non-logged-in users) as usage profiles and evaluates them. According to Art. 6 (1) lit. f GDPR, such an evaluation is based on the legitimate interests of Google in the display of personalized advertising, market research and / or customized design of its website. You have the right to object to the formation of these user profiles, whereby you must contact Google Maps to exercise it.

Google LLC, headquartered in the United States, is certified for the US-European Privacy Shield, which ensures compliance with the data protection level applicable in the EU.

If you disagree with the future transmission of your data to Google when using Google Maps, you can also disable the Google Maps web service completely by turning off the JavaScript application in your browser. Google Maps and thus the map display on this website can not be used. Google's Terms of Use can be viewed at www.google.com/intl/en/policies/terms/regional.html, and the additional Google Maps Terms of Service can be found at www.google.com/intl/en_US/help/terms_maps.html.

For details on privacy related to the use of Google Maps, please visit the Google Privacy Policy: www.google.com/intl/en/policies/privacy/.


Contact form / Contact by E-Mail (Art. 6 (1) lit. a, b GDPR)

There is a contact form on our website that can be used for electronic contact. When you write to us via the contact form, we process your information provided as part of the contact form to contact and respond to your questions and requests.

In doing so, we respect the principle of data minimization and data avoidance by providing only the information we need to contact you. These are your e-mail address, title, first name, surname, street, zip code, city and the message field itself. In addition, your IP address, browser version and operating system will be processed for technical reasons as well as legal security. All other data are optional fields and may be optional (e.g., to answer your questions more individually).

If you contact us by e-mail, we will process the personal data provided in the email solely for the purpose of processing your request. Unless you use the form offered to contact you, there will be no additional data collection.


Newsletter (Art. 6 (1) lit. a GDPR)

You can subscribe to a free newsletter on our website. The email address you provided when you subscribed to the newsletter will be used to send the personalised newsletter.

The principle of data minimisation and data avoidance is observed here, as only the email address (where appropriate the name in the case of a personalised newsletter) is mandatory. Your IP address will also be processed when you subscribe to the newsletter for technical reasons and legal protection.

You can of course terminate the subscription at any time via the opt-out option provided in the newsletter and therefore withdraw your consent. It is also possible to unsubscribe at any time directly via our website, by telephone, by fax, by post or in person from the newsletter delivery.


Web shop (Art. 6 (1) lit. b GDPR)

We process the data provided by you within the scope of the order form solely to execute and fulfil the underlying contractual relationship, unless you agree to further use.

The principle of data minimisation and data avoidance is observed here, as we only request data that is required to perform the contract or fulfil our contractual obligations (i.e. your name, address, email address and the payment data for the specific payment method you have chosen) or to collect data that is mandatory under the law (Business registration, VAT identification number for intra-Community goods deliveries).

Your IP address will also be processed for technical reasons and legal protection. If this data is not provided, we will have to decline the conclusion of the contract, as we cannot then perform the contract or will be obliged to terminate an existing contract, where appropriate. You can of course provide additional data on a voluntary basis.


Registration / Customer account (Article 6 (1) lit a, b GDPR)

In our website, we offer traders the opportunity to register by providing personal information. The advantage here is that you can, in particular, view your order history and save your data to use for your next order, without having to re-submit it.

The registration is either necessary to perform a contract (via our online shop) with you or to carry out pre-contractual measures or to provide our high-resolution image data.

The principle of data minimisation and data avoidance is observed here, as only the mandatory data fields required for registration are marked with an asterisk (*). This is e.g. the email address, password and password re-entry.

When ordering in our online shop, we also require the billing address information for the delivery (title, first name, surname, address, telephone and fax number and for EU companies the VAT identification number). If the delivery address is different from the billing address, the delivery address details mentioned above must also be provided.

Please note: Your password will be stored unencrypted internally on our company server. Only employees of our company can read this password. They can therefore give you information if you have forgotten your password.

Upon completion of the registration process, your data will be stored with us for use in the protected customer area. When you log in to our website with your email address as your username and your password, this data will be made available to you on our website (e.g. for orders in our online shop). You can specify changes to the billing or delivery address here.

Registered persons are free independently carry out changes / corrections of the invoice or delivery address in a future order. Changes / corrections are also gladly carried out by our customer service, if you contact them. Of course, we can also cancel or delete your registration or your customer account, just contact us.


Marketing purposes existing customers (Article 6 (1) lit f GDPR)

Company EDUPLAY GmbH is keen to nurture the customer relationship with you and to send you information and offers about our product / services (Catalog, Flyer, Supplement to delivery notes and invoices, Newsletter). We therefore process your data to send you the relevant information and offers via email, post and parcel service.

You may object to the use of your personal data for the purpose of direct marketing at any time; this also applies to profiling insofar as it is associated with direct marketing. If you object, we will cease processing your personal information for this purpose. The objection can be made free of charge and informally without giving reasons and should be addressed in writing by e-mail to privacy@eduplay.de or by post to EDUPLAY GmbH, Eichhofweg 11, 96450 Coburg, Germany.

Online offers for children

Persons under the age of 16 may not submit personal data to us or give a declaration of consent without the authorisation of their legal guardian. We encourage parents and guardians to actively participate in the online activities and interests of their children.