Data protection
With the following information we would like to give you an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail and how it is used depends largely on the services requested or agreed. Therefore, not all parts of this information will apply to you.
I. Our data protection at a glance
General
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified.
Who is responsible for data collection on this website?
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
UAB Trade Around
Artoyu g. 7E, 92105 Klaipeda, Lithuania
Email: office@trade-around.com
How do we collect your data?
On the one hand, your data is collected when you communicate it to us. This can, for example, be data that you transmit in an e-mail, by registering or by entering it in a contact form.
Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (e.g. type of Internet browser and operating system, language settings or the time the page was accessed). This data is collected automatically as soon as you enter our website.
What do we use your data for and on what legal basis?
We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG)
Part of the data is collected to ensure that the website is provided without errors. We require further data as part of the initiation and/or processing of a sales contract. Finally, data can be used to analyze your user behavior.
In detail, there are the following legal bases for our data collection and use:
a) to fulfill contractual obligations (Art. 6 Para. 1 b GDPR)
The data processing takes place on the basis of legal requirements in order to fulfill the purchase contract between you and us and the associated obligations. For this we process your personal data. The purposes of data processing are based on the specific order that you give us and can include needs, security and energy analyses, advice, measurements, etc. Further details on the data processing purposes can be found in the relevant contract documents and terms and conditions.
b) as part of the balancing of interests (Art. 6 Para. 1 f GDPR)
If necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties. Examples:
-
Advertising or opinion polls, provided you have not objected to the use of your data,
-
Assertion of legal claims or defense in legal disputes,
-
Ensuring IT security and IT operations of the company,
-
prevention and investigation of criminal offenses,
-
Consultation of and data exchange with credit agencies (e.g. SCHUFA) to determine creditworthiness and default risks,
-
Measures for business management and further development of our offer
c) based on your consent (Art. 6 Para. 1 a GDPR)
If you have given us your consent to the processing of personal data for specific purposes (e.g. passing on data to transport companies, collection agencies, sending newsletters, etc.), the legality of this processing is given on the basis of your consent. A given consent can be revoked at any time. The revocation of consent is only effective for the future and does not affect the legality of the data processed up to the point of revocation.
d) due to legal requirements (Art. 6 Para. 1 c GDPR) or in the public interest (Art. 6 Para. 1 e GDPR)
In addition, we are subject to various legal obligations, i.e. legal requirements for data processing (e.g. documentation obligations according to § 17 Para. 1 MiLoG, storage and storage obligations e.g. according to § 257 HGB and § 147 AO), obligations to process customer data e.g. § 312e Para. 1 S. 1 No. 3 BGB) and, if the GDPR applies, obligations to surrender, provide information and testify (e.g. according to Section 48 StPO).
Who gets my data?
Within the company, those departments that need your data to fulfill our contractual and legal obligations will have access to it. We only transfer your personal data to third parties if this is permitted by law or if you have given your prior consent. Above all, recipients of your personal data can be our transport service providers, IT service providers, collection agencies, banks, lawyers and logistics companies. The transmission takes place mainly for the purpose of executing the contract, for your advice, for billing the services provided by you and for clarifying questions arising from your contractual relationship. In individual cases, data is transmitted to other authorized recipients.
In principle, we may only pass on information about our customers if this is required by law or if the customer has given his consent. Under these conditions, recipients of personal data can be, for example:
-
other service providers and companies, in particular e.g. transport companies (DHL, UPS)
-
collection agencies and/or lawyers
-
Service providers that we use in the context of order processing relationships
Other data recipients may be those bodies for which you have given us your consent to data transmission or for which you have released us from medical confidentiality in accordance with an agreement or consent, or to which we are authorized to transmit personal data based on a balance of interests.
Is data transferred to a third country or to an international organization?
A data transfer to offices in countries outside the European Union (so-called third countries) takes place, insofar as
-
it is necessary for the execution of your orders,
-
it is required by law (e.g. tax reporting obligations) or
-
you have given us your consent.
Furthermore, a transmission to bodies in third countries is provided for in the following cases:
-
If this is necessary in individual cases, your personal data may be transmitted to an IT service provider in the USA or another third country to ensure the company's IT operations in compliance with European data protection standards.
-
Personal data of those interested in our services can also be processed in the USA with their consent as part of a CRM system.
How long will my data be stored?
We process and store your personal data as long as this is necessary for the fulfillment of our contractual and legal obligations. It should be noted that our business relationship usually ends with the completion of the purchase contract.
If the data is no longer required for the fulfillment of contractual or legal obligations, they are regularly deleted, unless their - temporary - further processing is necessary for the following purposes:
-
Fulfillment of storage obligations under commercial and tax law, which can result, for example, from the German Commercial Code (HGB) and the Fiscal Code (AO). The retention and documentation periods stipulated there are generally two to ten years.
-
Preservation of evidence within the framework of the statutory statute of limitations. According to §§ 195 ff of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.
What data protection rights do I have?
Every data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
You can revoke your consent to the processing of personal data at any time. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected.
In order to keep the essential information of this data protection declaration short, we have only summarized the rights to which you are entitled. A very detailed explanation of your rights can be found at the very end of this data protection declaration.
Am I obligated to provide data?
As part of our business relationship, you must provide the personal data that is required for the establishment, implementation and termination of a business relationship and for the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally not be able to enter into, perform and terminate a contract with you.
In particular, we are obliged under money laundering regulations to identify you using your ID document before establishing the business relationship and to collect and record your name, place of birth, date of birth, nationality, address and ID data. In order for us to be able to meet this legal obligation, you must provide us with the necessary information and documents in accordance with the Money Laundering Act and immediately report any changes that arise in the course of the business relationship. If you do not provide us with the necessary information and documents, we may not establish or continue the business relationship you have requested.
To what extent is there automated decision-making?
In principle, we do not use fully automated decision-making in accordance with Article 22 GDPR to establish and implement the business relationship. If we use these procedures in individual cases (e.g. when applying for credit cards), we will inform you separately about this and your rights in this regard, insofar as this is required by law.
Does profiling take place?
As a responsible and data-saving company, we do not use automatic decision-making or profiling of your data.
Information about your right of objection according to Article 21 GDPR
Individual right of objection
You have the right, for reasons that arise from your particular situation, at any time against the processing of personal data concerning you, which is based on Article 6 Paragraph 1 Letter e GDPR (data processing in the public interest) and Article 6 Paragraph 1 Letter f GDPR ( Data processing on the basis of a balance of interests) takes place to object; this also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR.
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right to object to the processing of data for direct marketing purposes
In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.
Recipient of an objection
The objection can be made informally with the subject "Objection" stating your name, address and date of birth and should be addressed to:
UAB Trade Around
Artoyu g. 7E, 92105 Klaipeda, Lithuania
Email: office@trade-around.com
II. Data collection on our website
We also process personal data on our website. With the following information we provide an overview of the processing of this personal data by us and the rights resulting from data protection law.
Personal data is generally collected to the extent technically necessary. Under no circumstances will the data collected be passed on to third parties without the consent of the person concerned. The following explanations give you an overview of how our company guarantees this protection and what type of data is collected, processed or used for what purpose on the website.
logging
Our website serves exclusively to provide information about our company and our range of services. When you visit our website, only the data transmitted by your browser to our server is collected. This data is necessary so that you can see our website and navigate on it. In detail, the following data is collected when you visit our website:
-
Internet protocol address (IP address)
-
Type of browser, as well as its language and version
-
operating system of your PC
-
Access Status/HTTP Status Code
-
Date and time of the request
-
Time zone difference to Greenwich Mean Time (GMT)
-
Content of the request and website from which it comes (referrer URL)
-
Internet service provider of the accessing system
-
Amount of data transferred
-
Other similar data and information that serves to avert danger in the event of attacks on our information technology systems. The data is also stored in the log files of our system. This does not affect the IP addresses of the user or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.
The aforementioned data are processed by us for the following purposes:
-
Ensuring a smooth connection establishment of the website,
-
Ensuring comfortable use of our website,
-
Evaluation of system security and stability as well
-
for other administrative purposes.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
We therefore evaluate this anonymously collected data and information statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.
cookies
Some of the websites use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are required to carry out the electronic communication process or to provide certain functions you want (e.g. shopping cart function) are stored on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this data protection declaration.
Contact form / contact by e-mail
If you send us appointment requests or inquiries via the contact form, the data you provide (e-mail address, name) will be saved in order to be able to answer your questions. It is necessary to provide a name and a valid e-mail address so that we know who sent the request and can answer it. Further information can be provided voluntarily.
Alternatively, you can contact us via the email address provided (info@lavelia.eu). In this case, the user's personal data transmitted with the e-mail will be stored.
Data processing for the purpose of contacting us takes place in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after the request you have made has been dealt with, provided there are no statutory storage requirements. This data will not be made accessible to third parties.
Initiation, implementation and termination of a contract
If you register on our websites and/or conclude another contract with us, we process the data required for the conclusion, implementation or termination of the contract with you. Which includes:
-
First name Last Name
-
billing and delivery address
-
E-mail address
-
billing and payment data
-
phone number
The legal basis for this is Article 6 Paragraph 1 Letters a) and b) GDPR, ie you provide us with the data on the basis of the respective contractual relationship (e.g. managing your customer/user account, processing a purchase contract) between you and us. In order to process your e-mail address in the event of a purchase via our websites/applications, we are also obliged to send an electronic order confirmation due to legal requirements in the German Civil Code (BGB) (Article 6 Paragraph 1 Letter c) GDPR).
If we do not use your data for advertising purposes, we store the data collected for the contract for the duration of the contract and until the statutory or possible contractual warranty and guarantee rights expire. After this period has expired, we will keep the information on the contractual relationship required under commercial and tax law for the periods specified by law. For this period, the data will only be processed again in the event of a review by the tax authorities.
