The protection of your personal data is a very important issue for us, M Store (hereinafter referred to as “M Store”). For this reason, we process your personal data exclusively in accordance with the applicable legal provisions for the protection of personal data, in particular the General Data Protection Regulation (GDPR).
The following data protection notice gives you an overview with respect to the processing of your personal data by us and your rights arising from the data protection laws. This data protection notice explains whether, and if so which personal data M Store processes in which scope in connection with the following procedures set out below.
In the process of the further development of our website and the use of new technologies in order to improve our service to you, amendments may occur to this data protection notice. For this reason, we recommend that from time to time you re-read this notice.
The data protection law terminology, which is used in the following is defined in Article 4 of the GDPR. The complete text of the GDPR can be found on the Internet at the following link:
3. Who is responsible for the data processing and whom can I contact?
Owner: Mafalda Patrícia Figueiredo Naia Fonseca da Costa
4. PERSONAL DATA
Personal data is defined by the General Data Protection Regulation (EU Regulation DS-GVO) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
5. Who does this data protection notice apply to?
As a short summary, when we process personal data this means that we, for example, collect, save, use, transfer or delete data.
These data protection notices are related to the personal data of:
Visitors to our website, who surf on our website; and
Visitors to our website, who use the communication possibilities provided on our website (for example, the contact form or registration form) or use our other services.
Which of your sources and data does M Store process?
M Store processes your personal data when you come into contact with us, for example as a visitor to our website or when you write us a message.
We process the following personal data:
Visit to our Website
In the case of a visit to our website, we process the following data: Technical access data: namely the name of your Internet service provider; the page from which you visited us or the name of the file requested; the date and time of your visit; and the identification data of the browser or operating system used. Our web server also saves your IP address. We also analyse this data - in anonymised form - for purely statistical reasons and without any connections being made to your person, for example for the analysis of the number of pages visited, the duration of use etc.
Communication - Contact Form, Registration
6. For which purpose do we process your data and upon which legal basis?
We process the personal data mentioned above in accordance with the applicable legislative provisions, in particular in accordance with the GDPR and the German Federal Data Protection Act. In particular:
6.1. Due to you having given consent (Article 6(1)(1)(a) GDPR)
It is permissible to process data, if you have provided consent for such a single or several certain purpose(s). You have the right at any time to revoke this consent, without the legal basis for the processing upon which the consent was provided until revocation being affected. Please note that the revocation of consent is only applicable for the future.
Contact Form, Email
If you send us a query by way of the contact form or an email, the details you give in the contact form as well as the contact data you provide for the processing of the query and in the case of follow-up questions arising, are saved. We do not pass on this data without your consent. The data is only stored for as long as is necessary for the final processing of your query.
If you sign up for our newsletter, we use your personal data to provide you with the newsletter based on your consent.
Revocation of Consent(s)
You can revoke your consent(s) for the future at any time.
The revocation can be made without adherence to formal requirements, for example by e-mail to: firstname.lastname@example.org or by way of a message to the contact details given above in 3.2. Additionally, you are able to revoke the subscription to the newsletter by way of clicking on the link provided in each newsletter e-mail.
6.2. Due to a legitimate interest (Article 6(1)(1)(f) GDPR)
We also process your data on the grounds of a legitimate interest held by us or a third party:
Visiting our Website
We use your data as well as the data from cookies and web-tracking tools so that you are able to completely use all the functions of our website as well as for the tailored design and optimisation of our website. The legal basis for the processing of the data set out below in the framework of a visit to the website of M Store, as well as for the use of social media plug-ins, cookies and tracking tools is Article 6(1)(1)(f) GDPR (legitimate interest). The legitimate interest is given in optimising the website and the range for the customer.
The details in connection with the use of:
social media plug-ins are described in detail under 9;
cookies are described in detail under 10; and
tracking-tools are described in detail under 11.
Our messages in connection with your making contact
In addition to the data which you actively provide us with (for example e-mail address), M Store also processes the personal data which is transmitted to us in the framework of the sending of messages or in connection with you making contact with us (for example, IP address, date and time). The processing occurs in order to prevent misuse and in order to ensure the security of our information technology systems.
Resolution of legal disputes, assertion, exercise and defence of legal rights (for example in connection with rights and obligations arising from the GDPR).
7.Who receives your data?
Within M Store only those departments who require access to your data in order to carry out their activities within M Store; in order to safeguard our legitimate interests; or for the fulfilment of contractual and legislative obligations obtain access to your data.
Insofar as you have shared your personal data with us, this will principally not be provided to third parties. Provision to third parties only occurs:
In the framework of the fulfilment of legal obligations to agencies authorised to obtain information;
In the framework of the processing of your queries, your orders and the use of our services, data will be provided to sub-contractors commissioned by us, who obtain the data required in order to carry out the work (for example, the sending of goods);
In the framework of consent provided by you.
8. Is the data transferred into a third country or to an international organisation?
Transfer of data to countries outside the EU or the EEC (so-called third countries) only takes place insofar as this is required for the carrying out of your orders; is required by law (for example taxation law notification obligations); or if you have provided consent hereto.
9. Social Media Plug-ins
On our website, so-called social media plug-ins (“plug-ins”) from social media networks are used. These services are operated by the following companies:
Facebook: Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”)
If you open a page on our website which contains such a plug-in, your browser creates a direct link to the server of the respective provider. The contents of the plug-in are transmitted directly to your browser by the respective provider and integrated into the page. By way of the integration of the plug-in, the provider obtains the information that your browser has opened the respective page of our web presence, even if you do not have a user profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server belonging to the respective provider in the USA, Ireland or in Germany, respectively, and saved there. If you are logged into one of these services, the providers can directly connect the visit to our website with your profile on Facebook and YouTube. If you interact with the plug-ins and click the relevant buttons, the relevant information is also directly transferred to a server belonging to the provider and saved there. The information is also published on Facebook or YouTube and shown to your contacts.
The purpose and scope of the data collection and the further processing and use of the data by the provider as well as your rights in this respect and the possibilities to protect your privacy by way of certain settings can be taken from the data protection notices of the providers:
Facebook data protection notice: http://www.facebook.com/policy.php
If you do not want Facebook, Twitter or LinkedIn to assign the data connected by way of our web presence directly to your profile on the relevant service, you must log out of the relevant service prior to your visit to our website.
11.Web Analysis by way of Tracking Tools
M Store uses the following web analysis tools as described below, in order to analyse the use of our website. Additionally, analyses of visitor numbers across all devices is carried out by way of a user-ID.In this manner, we are able - using the statistics obtained and other findings - to improve our product for you and to make it more interesting for you as a user.
The legal basis for the processing of personal data using the tracking tools described below is the legitimate interest of M Store in optimising the website and the product for you.
If you have configured your browser settings such that your browser, for example, rejects the acceptance of third-party cookies or all cookies, you will not be able to use the website or all functions thereof, respectively.
Google Web Analysis Tools
We use the following web analysis tools from Google Inc (“Google”):
The IP address from your browser transmitted by Google Analytics is not connected to other Google data.
You can prevent the storage of cookies by a respective setting in your browser software; however, we inform you that in that case, you may not be able to use all functions of this website in their full scope. Additionally, you are able to prevent the collection of the data created as a result of the cookie and your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension “_anonymizeIp()”. In this manner, the IP addresses are further processed in a shortened form, so that a direct link to an individual can be excluded. Insofar as the data collected in relation to yourself obtains a personal link, this is then immediately excluded, and the personal data is therewith promptly deleted.
We use Google Analytics in order to analyse the use of our website and to regularly improve it. By way of the statistics obtained as a result, we are able to improve our product and make it more interesting for you as the user.
Use of DoubleClick
Due to the marketing tools employed, your browser automatically creates a direct connection to the Google server. We have no influence upon the scope and further use of the data, which is collected by Google as a result of using this tool and therefore inform you to the extent of the information available to us: By using DoubleClick, Google obtains the information that you have visited the respective part of our Internet presence or have clicked upon an advertisement from us. Insofar as you are registered with a Google service, Google is able to match the visit to your account. Even if you are not registered with Google, or have not logged in, the possibility exists that the provider will find out your IP address and save it.
Further information on DoubleClick can be obtained at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090.
Google Adwords Conversion Tracking
We use the Google Adwords product in order to draw attention to our attractive products on external websites, using advertising means (so-called Google Adwords). We are able to find out how successful the individual advertising measures are in relation to the data from the advertising campaign. We are therefore pursuing our interest in showing you advertising which is interesting to you, in order to make our website more interesting for you and to achieve a fair calculation of advertising costs.
These advertising measures are delivered by Google via a so-called “Ad Server”. For this, we use Ad Server cookies, which are able to measure success by certain parameters, such as insertion of advertising or clicks by the user. Insofar as you reach our website via a Google advertisement, Google Adwords saves a cookie on your computer. These cookies generally lose their validity after 30 days and should not be used to identify you personally. In addition to this cookie, generally the analysis values of the unique cookie ID; the number of ad impressions per placement (frequency); last impression (relevant for post-view conversions); as well as opt-out information (a comment that the user does not wish to be contacted again) are saved.
These cookies enable Google to recognise your Internet browser. Insofar as a user visits certain pages on the website of an Adwords customer and the cookie installed on his computer has not expired, Google and the customer are able to recognise that the user has clicked on the advertisement and was routed to this page. Every Adwords customer is allocated a different cookie. Therefore, cookies cannot be followed via the websites of Adwords customers. In these advertising measures mentioned, we do not collect and process any personal data ourselves. We are merely provided with statistical analyses from Google. On the basis of these analyses, we are able to recognise which of the advertising measures implemented are particularly successful. We do not receive further data from the implementation of advertising measures, and in particular we are not able to identify the user by way of this information.
Due to the marketing tools employed, your browser automatically creates a direct connection to the Google server. We have no influence upon the scope and further use of the data, which is collected by Google as a result of using this tool and therefore inform you to the extent of the information available to us: By way of the use of Adwords Conversion, Google obtains the information that you have visited the respective part of our Internet presence or have clicked upon one of our advertisements. Insofar as you are registered with a Google service, Google is able to match the visit to your account. Even if you are not registered with Google, or have not logged in, the possibility exists that the provider can find out your IP address and save it.
You are able to prevent participation in Google Adwords Conversion and DoubleClick Tracking in various ways:
By the relevant setting on your browser software: particularly the suppression of third party cookies leads to you not being shown advertisements from third party providers;
By deactivating cookies for conversion tracking, by setting your browser such that cookies from the domain “www.googleadservices.com” are blocked, https://www.google.de/settings/ads, although this setting is deleted when you delete your cookies.
By deactivating the interest-related advertisements from those providers who are a part of the self-regulation campaign “About Ads”, by using the link http://www.aboutads.info/choices, whereby this setting is deleted when you deleted your cookies; or
By permanent deactivation in your Firefox, Internet explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. You are informed that in this case, you may not be able to use all functions of the range of products in their full scope.
For those exceptional situations, in which personal data is transmitted to the USA; Google has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Information of the Third-Party Provider:
Google Dublin, Google Ireland Ltd.,
Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
You can find further information about data protection at Google here: http://www.google.com/intl/en/policies/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
12. How long is my data saved for?
M Store processes and stores your personal data for as long as it is required to achieve the purpose of the collection. If the data is no longer required for the purpose of its collection, it is deleted, unless it’s - temporary - (further) processing is required for the following purposes:
Legislative Retention Periods
For adherence to the (commercial code and taxation law) legislative retention or documentation periods arising from the German Commercial Code and the German Fiscal Code. These periods can be up to ten years.
For retention of evidence in the framework of the legislative statutes of limitation:
According to Paragraphs 195ff of the German Civil Code, these statutes of limitation can be up to thirty years, although the usual statute of limitation is three years.
Additionally, with respect to storage relating to individual acts, the following is applicable:
Visiting the Website
In principle, your data is deleted as soon as the relevant session ends. Log files are deleted after seven days. Storage over and beyond this is, however, permissible in certain situations. In this case, the IP addresses of the user are deleted or distorted, so that a classification of the clients visiting is no longer possible.
Contact Forms and Email Queries
If you send us a query by way of contact form or email, your data from the query form including the contact details you provide us with therein are only saved as long as this is required for the final processing of your query, and eventual further queries.
13.Which data protection rights do I have?
As a data subject of data processing, the GDPR, in particular, affords you the following rights (“Subject Rights”):
Right to Information:
According to Article 15 GDPR, you are able to request information from us as to whether M Store processes personal data relating to you and which data that is.
Right to Data Correction:
If your data is incorrect, according to Article 16 GDPR, you are able to require that it be corrected. If your data is incomplete, you may require it to be completed. If M Store has provided your data to a third party, these third parties will be informed of your correction - to the extent that this is legislatively required.
Right to Deletion of Personal Data:
You have the right to have the data which M Store holds deleted, insofar as the prerequisites contained in Article 17 GDPR have been fulfilled (particularly when the purposes for which your data was collected or processed, cease to exist).
Right to Restrict Use:
You have the right to restrict the processing of your data, insofar as the prerequisites contained in Article 18 GDPR have been fulfilled.
Right to Data Portability:
Further, if you so request, we will provide you with your data for further use or transmit it to a recipient designated by yourself, insofar as the prerequisites of Article 20 GDPR have been fulfilled.
Right to Revocation of Consent (for more information on the use of this right, see above at 6.1):
If consent has been granted to process the personal data, the right to revoke the consent granted always exists with respect to the future, that is to say, the revocation does not affect the legality of the processing which took place prior to the revocation on the basis of the consent provided. Following revocation, M Store may only process the personal data insofar as this processing is necessary for M Store on the basis of legal requirements.
Right to Object to Use:
Right to Object to Use
According to Article 21(1) GDPR, you have the right to object to the processing of personal data relating to you, which processing occurs due to Article 6 (1)(1)(f) GDPR (processing of data for the protection of legitimate interests).
Insofar as you object, we will no longer process the personal data for the purpose against which you have objected, unless:
We can prove the existence of compelling reasons worthy of protection, which outweigh the interests, rights and freedoms of the data subject; or
The processing is for the assertion, exercise or defence of legal rights.
Insofar as the objection is also or only made with respect to the data processing for direct advertising, we will no longer process your personal data for this purpose.
The objection can be made without adherence to formal requirements, for example by e-mail to email@example.com or by way of a message to the contact details given above in 3.
Right to Lodge a Complaint:
Further, a right to lodge a complaint with a data protection supervisory authority exists as given in Article 77 GDPR in connection with Paragraph 19 of the German Federal Data Protection Law. However, we recommend that you should always initially direct your complaint to us. You can find the contact details at 3.
14.Effect of the Failure to Provide
If the personal data mentioned is not placed at its disposal, M Store cannot collect it. In some cases, the individual purposes described will not be able to be fulfilled.
15.No Automatic Decision-making
M Store does not employ the automatic decision-making process in the sense given in Article 22 GDPR to found and execute contractual relationships.
Berlin, February 2019