Privacy policy

Data protection

Responsible body

perarca UG (haftungsbeschränkt)
Holsteinischer Kamp 80
22081 Hamburg
Email: office@perarca.com

Perarca takes the protection of your data seriously. With this data protection declaration we inform you about the type, scope and purpose of the processing of personal data and about the rights to which you are entitled as a data subject. If you have any questions about data protection, we are available at any time using the contact details provided.

1. Orders through our online-shop

The processing of personal data (name, address, contact and payment data) is necessary for the processing of orders via our online shop. We process this data to process the order and, if desired, to open a customer account and to subscribe to a newsletter.

To subscribe to the e-mail newsletter, a double opt-in is required from May 2021 (select the newsletter option at checkout or via a registration pop-up, confirmation of the subscription after receipt of the confirmation e-mail). You can unsubscribe from this newsletter at any time.

The transfer of personal data for newsletter purposes takes place to the extent necessary to the company commissioned with the creation of the newsletter (e.g. Omnisend ™).

The data is passed on only to the necessary extent to the company commissioned with the delivery (e.g. byrd technologies Germany GmbH, GLS or DHL) or the service provider commissioned with the payment (Stripe Inc. or PayPal Inc.).

We use Shopify, a service from Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5, to operate our online shop. Shopify provides an e-commerce platform through which we offer our goods for sale. The data provided during the ordering process is stored on a Shopify server in the USA. Further information can be found in Shopify's data protection information at http://www.shopify.com/legal/privacy.

The legal basis for this data processing is Article 6 (1) lit. b) of the General Data Protection Regulation (GDPR). Once the contract has been processed in full and the purchase price has been paid in full, your data will be blocked for further use and, unless legal requirements stipulate longer storage, deleted. If you have created a customer account, your data will generally remain stored until you delete the customer account. If no orders are placed via a customer account for more than two years, we will delete the account including the data.

2. Inquiries by email

If you contact us via the email address provided, the personal data transmitted with the email will be saved. These data are processed exclusively to answer the request. The legal basis for the processing is Art. 6 (1) lit. f.) GDPR or Art. 6 (1) lit. b) GDPR if the request is aimed at the conclusion of a contract. The data will be deleted if the purpose of the processing no longer applies, e.g. the request has been finally answered.

You can request the processing of your personal data at any time by email office@perarca.com widersprechen.

 

    3. Rights of the subject

    The persons affected by the processing of personal data have the following rights:

    1. Right of providing information

    (1) DThe person concerned has the right to request confirmation from the person responsible as to whether personal data relating to them are being processed; If this is the case, she has a right to information about this personal data and the following information:

    1. the purposes of the processing;
    2. the categories of personal data that are processed;
    3. the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular in the case of recipients in third countries or international organizations;
    4. If possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration;
    5. the existence of a right to correction or deletion of personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing;
    6. the right to lodge a complaint with a supervisory authority;
    7. if the personal data are not collected from the data subject, all available information about the origin of the data;
    8. the existence of automated decision-making including profiling according to Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

    (2) If personal data is transmitted to a third country or to an international organization, the person concerned has the right to request the appropriate guarantees in accordance with  Article 46  GDPR to be informed in connection with the transmission.

     

    1. Right to rectification

    The subject has the right to request the controller to correct any incorrect personal data relating to them without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data - including by means of a supplementary declaration .

    1. Right to cancellation

    (1) The subject has the right to request the person responsible to delete personal data concerning them immediately, and the person responsible is obliged to delete personal data immediately if one of the following reasons applies:

    1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
    2. The data subject revokes their consent, on which the processing was based in accordance with  Article 6 (1 ) lit. a) or Article 9 (2) lit. a) GDPR based, and it there is no other legal basis for the processing.
    3. The person concerned objects to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or the data subject submits according to  Article 21 ( 2)
      DSGVO objection to processing.
    4. The personal data was processed unlawfully.
    5. The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.
    6. The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR collected.

    (2) If the person responsible has made the personal data public and is obliged to delete it in accordance with Paragraph 1, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, in order to ensure that the person responsible for the data processing does process the personal data, to inform that a data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data

    (3) Paragraphs 1 and 2 do not apply if processing is necessary

    1. to exercise the right to freedom of expression and information;
    2. to fulfill a legal obligation that requires processing under the law of the Union or the Member States to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that is transferred to the person responsible was;
    3. for reasons of public interest in the area of ​​public health according to Article 9  (2) lit . h) and i) as well as  Article 9 (3) GDPR;
    4. for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes according to  Article 89  (1), insofar as the right mentioned in paragraph 1 is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or
    5. for the establishment, exercise or defense of legal claims.
    1. Right to restriction of processing

     

    (1) The data subject has the right to request the controller to restrict processing if one of the following conditions is met:

    1. the accuracy of the personal data is contested by the data subject, for a period that enables the person responsible to check the accuracy of the personal data,
    2. the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data;
    3. the person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
    4. the person concerned has lodged an objection to the processing in accordance with Article 21  (1) GDPR, as long as it is not certain whether the legitimate reasons of the person responsible outweigh those of the person concerned.

    (2) If processing has been restricted in accordance with paragraph 1, these personal data - apart from their storage - may only be used with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal entity Person or for reasons of an important public interest of the Union or a Member State.

    1. Right to data portability

    (1) The data subject has the right to receive the personal data concerning them that they have provided to a responsible person in a structured, common and machine-readable format, and they have the right to transfer this data to another responsible person without hindrance by the person responsible to whom the personal data was provided, provided that

    1. the processing is based on consent in accordance with Article 6 (1) lit. a) or  Article 9  (2) lit. a) GDPR or on a contract according to Article 6  (1) lit. b) GDPR and
    2. the processing is carried out using automated procedures.

    (2) When exercising their right to data portability in accordance with Paragraph 1, the person concerned has the right to have the personal data transmitted directly from one person in charge to another person in charge, insofar as this is technically feasible.

    The right under paragraph 1 must not impair the rights and freedoms of other persons.

    This right does not apply to processing that is necessary for the performance of a task that is in the public interest or that is carried out in the exercise of official authority vested in the person responsible.

    1. Right of objection

    The person concerned has the right, for reasons that arise from their particular situation, to object at any time to the processing of personal data concerning them, which is based on  Article 6 (1) lit. e) or f) GDPR, to file an objection; this also applies to profiling based on these provisions. The person responsible no longer processes the personal data unless he can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the Processing serves to assert, exercise or defend legal claims.

    In connection with the use of information society services, regardless of the Directive 2002/58 / EC the data subject can exercise his or her right of objection by means of automated procedures in which technical specifications are used.

    1. Right of withdrawal

    The person concerned has the right to revoke their data protection declaration of consent at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

    1. Right to complain to a supervisory authority

    Without prejudice to any other administrative or judicial remedy, every person concerned has the right to lodge a complaint with a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of the alleged infringement, if the person concerned is of the opinion that the processing of the personal data concerning them violates this regulation.

    1. Security

    We have taken technical and organizational measures to ensure that your personal data is protected. We will continuously improve these measures. 

    Status and update

    The status of this data protection declaration is January 2021.

    We update the privacy policy from time to time. Please inform yourself about the current status of this data protection declaration.