Personal data is any information relating to an identified or identifiable natural person.
The data protection declaration gives you an overview of what kind of personal data is processed and for what purpose. Furthermore, this privacy statement indicates how we ensure the protection of your personal data.
1. name and contact details of the controller
This privacy information applies to data processing by:
Frank's Modellautoecke - Owner: Frank Finkel
Telephone: 06331 144212
fax: 06331 144211
3. collection and storage of personal data as well as type and purpose of their use
a) When visiting our website
You can visit our website www.franks-modellautoecke.de without having to provide us with any information about yourself (who you are).
In the case of such purely informational use of our website, i.e. if you do not register or otherwise provide us with information about yourself, we only collect the personal data that your browser transmits to our server. When you call up our website www.franks-modellautoecke.de, information is automatically sent to our website server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
IP address of the requesting computer,
Date and time of access,
Name and URL of the accessed file,
website from which the access was made (referrer URL),
browser used and, if applicable, the operating system of your computer as well as the name of your access provider, language and version of the browser software.
The aforementioned data is processed by us for the following purposes:
Ensuring a smooth connection setup of the website,
Ensuring a comfortable use of our website,
evaluation of system security and stability, and
for other administrative purposes.
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f) EU-DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
b) When using our webshop
When using our webshop, e.g. by submitting your offers, by your acceptance of our offers, by your registration or by other communication, we process the personal data provided by you exclusively for the purpose of initiating or fulfilling the contract.
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b) EU-DSGVO. According to this, data processing is necessary for the conclusion or fulfillment of a contract to which the data subject is a party, or for the implementation of pre-contractual measures that take place at the request of the data subject.
When using our webshop, the following personal data transmitted by you will be processed by us:
First and last name (for companies: company).
Telephone number (landline number and/or mobile phone number)
Fax number (only if available)
IBAN (only if required for processing the payments)
Credit card number including check digit (only if required for the processing of payments)
This data is processed for the purpose of fulfilling contractual obligations, in particular for shipping the goods, for processing payment including invoicing, for processing any warranty claims and for any related correspondence with you.
You can also voluntarily create a customer account in which we can store your personal data for future purchases. When you create an account under "My Account", the data you provide there will be stored revocably. You can always delete all further data, including your user account, in the customer area.
c) When registering for our newsletter
If you have expressly consented (Art. 6 para. 1 p. 1 lit. a) EU-DSGVO), you can subscribe to our newsletter, in which we inform you about current offers from the area of goods and/or services. The goods and/or services advertised in the newsletter are named in the declaration of consent. Mandatory information for receiving the newsletter is exclusively your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally.
For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail message to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The legal basis for this data processing is your voluntarily given consent (Art. 6 para. 1 p. 1 lit. a) EU-DSGVO).
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. For this purpose, you can send your unsubscribe request by e-mail message to the e-mail address email@example.com.
4. transfer of data to third parties
A transfer of your personal data to third parties for purposes other than those listed below does not take place. In particular, no data will be passed on to third parties, e.g. for advertising purposes, without your express consent.
We will only pass on your personal data to third parties if:
you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a) EU-DSGVO;
this is necessary according to Art. 6 para. 1 p. 1 lit. b) EU-DSGVO for the processing of contractual relationships with you, e.g. to credit institutions for the processing of contractually agreed payments, to shipping and transport companies for the purpose of transporting goods, including shipment tracking, in the event of non-fulfillment of contractually agreed payments for the purpose of legal enforcement to lawyers and legal services companies;
in the event that a legal obligation exists for the disclosure pursuant to Art. 6 (1) p. 1 lit. c) EU-DSGVO; or
the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 (1) p. 1 lit. f) EU-DSGVO and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.
In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) p. 1 lit. f) EU-DSGVO.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
6. storage period and data deletion
Your personal data will be deleted in particular as soon as they are no longer necessary for the purposes for which they were collected or otherwise processed. Thereafter, the data will be deleted unless storage is necessary for compliance with a legal obligation which requires processing under the law of the Union or the Member States to which the controller is subject, or for the assertion, exercise or defense of legal claims. A legal obligation is represented by the statutory retention obligations, which are, for example, 10 years (for accounting data incl. order and payment data, payroll as well as salary accounting) or 6 years (for commercial correspondence). During the period of the retention obligations, the data is blocked, after which it is deleted.
7. data subject rights
You have the right
in accordance with Art. 7 (3) EU-DSGVO to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future. The legality of the data processing carried out until the revocation remains unaffected by your revocation;
to request information about your personal data processed by us in accordance with Art. 15 EU-DSGVO. In doing so, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
in accordance with Art. 16 EU-DSGVO, to immediately request the correction of incorrect or completion of your personal data stored by us;
pursuant to Art. 17 EU-DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims;
pursuant to Art. 18 EU-DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
pursuant to Art. 20 EU-DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
complain to a supervisory authority in accordance with Art. 77 EU-DSGVO. The competent supervisory authority is the state data protection commissioner of the federal state in which our company is based. An overview of the state data protection commissioners together with their contact details is available at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
8. right of objection
Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f) EU-DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation. In the event of your justified objection, we will review the factual situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
9. data security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We also use SSL or TLS encryption (SSL = Secure Sockets Layer; TLS = Transport Layer Security; SSL is the previous name of TLS) within your website visit. You can tell whether an individual page of our website is transmitted in encrypted form by the fact that the address line of the browser changes from "http://" to "https://" and also by the lock symbol in your browser line. If SSL or TLS encryption is activated, data that you transmit to us cannot be read by third parties.
10 Status and possible changes to this data protection declaration
This data protection declaration is as of May 2018.
You can access and print out the current data protection declaration at any time using the following link.