Privacy Policy – Vikings Shop

Designation of the responsible entity

The responsible party for data processing on this website is Vikings GmbH, Oppenhoffallee 143, 52066 Aachen, Germany.

The responsible party decides alone or jointly with others on the purposes and means of the processing of personal data (e.g. names, contact details, or similar).

Data processing of your data is only possible with your explicit consent. A revocation of already given consent is possible at any time. An informal communication by email is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation. However, we reserve the right to further processing if compelling reasons for the processing can be demonstrated that outweigh your interests, or if the processing serves the exercise, assertion, or defense of legal claims.

Right to complain with the competent supervisory authority.

As a data subject, you have the right to file a complaint with the competent supervisory authority in the event of a data protection violation. The competent supervisory authority concerning data protection issues is the state data protection commissioner of the federal state in which our company’s registered office is located. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically based on your consent or in the performance of a contract handed over to you or third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

Right to information, correction, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, the origin of the data, their recipients, and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. In this regard and also for further questions on the subject of personal data, you can contact us at any time via the contact options listed in the imprint.

TLS encryption

For security reasons and to protect the transmission of confidential content that you transmit to us, we use TLS encryption.

Data collection when visiting our website

Data collection during informational use

During purely informative use of our website, we do not collect any personal data, except for error handling for diagnostic purposes. Your IP address is stored anonymously for 24 hours. The anonymization is only temporarily removed in exceptional cases due to technical necessity, such as attacks on our web server. The data will not be passed on or used in any other way.

Data collection when opening a customer account

Following art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent necessary in each case if you provide us with this data when opening a customer account. You can find out which data is required for opening an account from the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time. After deletion of your customer account, your data will be deleted if all contracts concluded via it have been processed, no legal requirements oppose this and no legitimate interest in the continued storage exists.

Data processing for order processing

Data transmission upon conclusion of a contract for the purchase and shipment of goods

Personal data will only be transmitted to third parties if this is necessary for the processing of the contract. Third parties can be, for example, payment service providers, credit institutions, or logistics companies. A further transmission of the data does not take place or only then, if you have expressly consented to this.

The basis for data processing is art. 6 (1) lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Transfer of personal data to shipping service providers

We use the following shipping service providers:

Deutsche Post, Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
DHL, DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
DHL Express, DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
UPS, United Parcel Service Germany Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

We will pass on your email address to the delivery service manager before delivery of the goods to coordinate a delivery date and delivery notification, provided that you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for delivery. This information will only be passed on if it is necessary for the delivery of the goods. In this case, prior coordination of the delivery date and delivery notification with the shipping service provider is not possible. The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the shipping service provider.

Transfer of personal data to payment service providers

Mollie

If you choose to use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, The Netherlands, we will transmit the information you provided during the order process together with information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number). The transfer of your data is solely for payment processing and only to the extent necessary for this purpose.

Registration on this website

To use certain functions, you can register on our website. The transmitted data is used exclusively to use the respective offer or service. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration. In the event of important changes, for example for technical reasons, we will inform you by email. The email will be sent to the address given during registration.

The processing of the data entered during registration is based on your consent (art. 6 (1) lit. a GDPR). Revocation of your already given consent is possible at any time. An informal communication by email is sufficient for the revocation. The legality of the data processing already carried out remains unaffected by the revocation.

We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Legal retention periods remain unaffected.

Cookies

Our website uses technical necessary cookies. Such cookies are deleted by themselves after the end of your browser session. Disabling these cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you, is based on art. 6 (1) lit. f GDPR. We have a legitimate interest in storing cookies for providing our services.

Verification of the email address provided is necessary and you must agree to receive the newsletter. Supplementary data is not collected or is voluntary. The data is used exclusively for sending the newsletter. We use the double opt-in procedure which ensures explicit consent (art. 6 (1) lit. a GDPR). Revoking your consent is possible at any time; an informal message by email is sufficient or you unsubscribe via the “unsubscribe”-link in any of the newsletters already received. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data entered to set up the subscription will be deleted in the event of unsubscribing from the email newsletter. If this data has been transmitted to us for other purposes and elsewhere, it will continue to remain with us.

Duration of storage of personal data

The duration of the storage of personal data depends on the legal basis, the purpose of processing, and, if applicable, additionally based on the respective statutory retention period, such as retention periods under tax law.

When processing personal data based on explicit consent according to art. 6 (1) lit. a GDPR, this data is stored until the data subject revokes his or her consent.

When processing personal data based on art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises his or her right to object unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If there are legal retention periods for data that is processed within the scope of legal business or legal business-like obligations based on art. 6 (1) lit. b GDPR, this data will be routinely deleted after the retention periods have expired, insofar as it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no continued legitimate interest on our part in the continued storage.

In the case of processing of personal data for direct advertising based on art. 6 (1) lit. f GDPR, this data will be stored until the data subject exercises his or her right to object.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.