Table of contents

  1. Purpose and controller
  2. General information on data processing
  3. Processing of personal data
  4. Collection of access data
  5. Cookies & reach measurement
  6. Google Analytics
  7. Integration of third-party services and content
  8. User rights and deletion
  9. Changes to this privacy policy

1. Purpose and controller

This privacy policy explains the nature, scope and purpose of the processing (including collection, processing and use, as well as obtaining consent) of personal data within our online offering and the associated websites, functions and content (collectively referred to below as the “online offering” or “website”). This privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) on which the online offering is operated — it therefore also applies to pundmannshop.com.

The provider of this online offering and the party responsible for data protection is Pundmann Sp. z o.o., Ul. Bytomska 49, 42-674 Karchowice, Poland (hereinafter “provider”, “we” or “us”). For contact details, please refer to our legal notice (Impressum).

The term “user” includes all customers and visitors of our online offering. Terms such as “user” are to be understood as gender-neutral.

2. General information on data processing

We process users’ personal data only in compliance with the applicable data protection provisions and in accordance with the principles of data minimisation and avoidance. This means that users’ data is processed only where there is a legal basis for doing so — in particular where the data is required to provide our contractual services and online services, is legally required, or where consent has been given.

We take organisational, contractual and technical security measures in line with the state of the art to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons.

Where content, tools or other resources from other providers (collectively referred to below as “third-party providers”) are used within this privacy policy and their registered office is abroad, it should be assumed that data is transferred to the third-party providers’ home countries. The transfer of data to third countries takes place either on the basis of a legal permission, user consent, or specific contractual clauses that ensure the legally required level of data security.

3. Processing of personal data

In addition to the uses expressly mentioned in this privacy policy, personal data is processed for the following purposes on the basis of legal permissions or user consent:

We only disclose users’ data to third parties where this is necessary for billing purposes (e.g. to a payment service provider) or for other purposes necessary to fulfil our contractual obligations toward users (e.g. providing an address to a supplier).

When you contact us (via contact form or email), your details are stored for the purpose of processing your enquiry and in case follow-up questions arise. Personal data is deleted once it is no longer needed for its purpose and no statutory retention obligations prevent deletion.

4. Collection of access data

We collect data on every access to the server on which this service is located (so-called server log files). Access data includes the name of the page accessed, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

We use log data, without linking it to the user’s identity or creating any other profile, only for statistical evaluation for the purpose of operating, securing and optimising our online offering, in accordance with statutory provisions. We reserve the right to review log data retrospectively where there are concrete indications of a justified suspicion of unlawful use.

5. Cookies & reach measurement

Cookies are pieces of information transmitted from our web server or third-party web servers to users’ web browsers and stored there for later retrieval. Users are informed within this privacy policy about the use of cookies for pseudonymous reach measurement.

This online offering can also be viewed without cookies. If users do not want cookies to be stored on their computer, they are asked to disable the relevant option in their browser’s system settings. Stored cookies can be deleted in the browser’s system settings. Disabling cookies may lead to functional limitations of this online offering.

Many online advertising cookies from companies can be managed via the US website aboutads.info/choices or the EU website youronlinechoices.com.

6. Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie about users’ use of the online offering is generally transmitted to a Google server in the USA and stored there. On our behalf, Google will use this information to evaluate users’ use of our online offering, to compile reports on activities within this online offering, and to provide us with further services related to the use of this online offering and internet usage. Pseudonymous usage profiles of users may be created from the processed data.

We only use Google Analytics with IP anonymisation activated. This means that users’ IP addresses are shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user’s browser is not merged with other Google data.

Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offering from being sent to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.

Further information on the use of data for advertising purposes by Google, as well as settings and opt-out options, can be found on Google’s websites: how Google uses data when you use our partners’ sites or apps, use of data for advertising purposes, manage the information Google uses to show you ads and control which ads Google shows you.

7. Integration of third-party services and content

It may happen that content or services from third-party providers, such as city maps, fonts, or embedded contact and service forms from other websites, are integrated within our online offering. The integration of third-party content always requires the third-party providers to be aware of users’ IP address, since without the IP address they could not send the content to the user’s browser. The IP address is therefore necessary for the display of this content. Furthermore, third-party content providers may set their own cookies and process users’ data for their own purposes. Usage profiles of users may be created from the processed data. We aim to use such content in a manner that is as data-minimising as possible, and to select reliable third-party providers with regard to data security.

The following overview lists third-party providers and their content, together with links to their privacy policies, which contain further information on data processing and, in some cases already mentioned here, opt-out options:

8. User rights and deletion of data

Users have the right to obtain, free of charge upon request, information about the personal data we have stored about them. In addition, users have the right to have inaccurate data corrected, to withdraw consent, to have their personal data blocked and deleted, and the right to lodge a complaint with the competent supervisory authority if they believe their data has been processed unlawfully.

Data stored by us is deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent its deletion.

9. Changes to this privacy policy

We reserve the right to amend this privacy policy in order to adapt it to changed legal requirements or to changes in the service and data processing. This applies only to declarations regarding data processing. Where user consent is required, or where parts of this privacy policy contain provisions of the contractual relationship with users, changes will only be made with the users’ consent. Users are asked to check the content of this privacy policy regularly.