Privacy Policy


Name and Address of the Responsible Party

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Sachsen Fahnen GmbH & Co. KG/Vispronet®
Am Wiesengrund 2
01917 Kamenz
Germany

Phone: +49 (0) 3578 359-0

We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below, we provide detailed information about the handling of your data.

The protection of personal data is taken very seriously by Vispronet®. Compliance with legislation and other legal requirements is a matter of course for Vispronet®. Therefore, Vispronet® has implemented technical and organizational measures to ensure that data protection regulations are observed and complied with both by Vispronet® and by third parties involved in contract fulfillment.

You can visit our websites without providing any personal information.

When you use this website, various personal data are collected. Personal data are data by which you can be personally identified. This privacy policy explains which data we collect and how we use it. It also explains how and for what purpose this is done.
We point out that data transmission over the Internet (e.g., communication via e-mail) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Data collection on our website

Part of the data we collect on our website is provided by you. For example, your data is collected during the ordering process or by entering it into a contact form. We use this data exclusively to process your inquiry or order.

Furthermore, technical data are automatically collected when visiting our website, such as the internet browser used, the operating system, and the time of the page visit. These data primarily serve to ensure error-free provision of the website and to identify and resolve technical problems.

Another purpose of data collection on our website is the analysis of user behavior. This involves information derived from technical data, such as the duration of the visit to our website, the pages visited, or the frequency of visits. These data help us improve our website and our offerings and tailor them to the needs of our customers.

We place great importance on protecting your data and comply with applicable data protection regulations. Your data will be used exclusively for the purposes stated and will not be passed on to third parties unless required by law or necessary for the fulfillment of your inquiry or order.

Storage of access data in server log files

When you access our website, general information is automatically collected and stored in the server log files. This includes information such as the type and version of the web browser, the operating system used, the website from which you accessed our website (so-called referrer), the domain name of your internet service provider, the date and time of access, as well as the IP address.

This information is technically necessary to correctly deliver the content of our website and to ensure the functionality of our information technology systems and our website. We use these anonymous data and information exclusively for statistical evaluation to optimize our internet presence and the underlying technology. The anonymous data from the server log files are stored separately from all personal data entered by an affected person.

The storage and evaluation of this access data serves, according to Art. 6 para. 1 sentence 1 lit. f GDPR, to safeguard our legitimate interests in the correct presentation of our offer and the trouble-free operation of the website.

Data collection and use for contract processing and when opening a customer account

When placing orders or contacting us via our website, personal data that you provide voluntarily are collected. The respective input forms indicate which data must be collected to process your order or inquiry. Mandatory fields are marked accordingly. Without this information, ordering or contacting us is not possible. We use the data you provide in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and handling your inquiries. After the conclusion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiration of the tax and commercial retention periods, unless you have explicitly consented to further use of your data or we are legally obliged to retain the data. You can request the deletion of your customer account at any time by sending a message to the contact option described below.

Contact form inquiries

If you send us inquiries via the contact form, your details from the inquiry form, including the contact information you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We treat your data confidentially and do not pass it on without your consent.

The processing of the data entered into the contact form is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR). You can revoke this consent at any time. A simple notification by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Inquiries via E-mail or Telephone

If you contact us by e-mail or telephone, your personal data (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not pass this data on to third parties without your consent.

The processing of your data is based on Art. 6(1)(b) GDPR, provided your inquiry is related to the fulfillment of a contract or necessary for pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interest (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective handling of inquiries addressed to us.

Data Transmission for Contract Fulfillment

To process your order and deliver the goods you have ordered, we must pass your personal data to the commissioned shipping company. This is done exclusively to the extent necessary and to fulfill our contractual obligations. Depending on which payment service provider you select during the ordering process, we transmit the payment data collected for this purpose to the credit institution responsible for the payment and, if applicable, to payment service providers commissioned by us or the selected payment service. Some payment service providers collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider during the ordering process using your access data. The privacy policy of the respective payment service provider applies in this case.

The legal basis for processing your data is Article 6(1)(b) GDPR, which permits the processing of personal data for the performance of a contract or pre-contractual measures. The same applies to the transfer of your data to our manufacturers or wholesalers if they handle the shipment of goods for us (drop shipping).

Data Usage for Newsletter Registration

If you register for the newsletter offered on our website, we require your e-mail address as well as information that enables us to verify that you are the owner of the specified e-mail address and consent to receiving the newsletter. No further data is collected or only on a voluntary basis.

The processing of the data entered into the newsletter registration form is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can revoke the consent given for the storage of data, the e-mail address, and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter or via the unsubscribe form at /dsenhancednewsletter/subscriber/unsubscribe/.

We point out that we conduct an analysis of user behavior to optimize our newsletter offering. Data such as whether the newsletter was opened and which links were clicked are collected. The processing of this data is carried out exclusively in anonymized form so that no conclusions can be drawn about the recipient.

For sending the newsletter, we use the service Inxmail, provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg/Germany. The data you enter for newsletter subscription (e.g., e-mail address) is stored on Inxmail's servers in Germany. We have concluded a contract for order data processing with Inxmail, which ensures that your data is processed exclusively within the framework of legal requirements.

Data Usage for Postal Advertising and Your Right to Object

We use your data, which we have received from you within the framework of a contractual relationship, such as your first and last name, postal address, title, academic degree, as well as your professional, industry, or business designation, to send you interesting offers and information about our products by postal mail. We store this data in aggregated lists and use it exclusively for our own advertising purposes.

You have the right to object to this use of your data at any time. Please send us a message to the contact option described below. We will then delete your data immediately and no longer contact you for advertising purposes.

This data usage serves to safeguard our overriding legitimate interests in advertising communication with our customers within the framework of a balancing of interests pursuant to Art. 6(1) sentence 1 lit. f GDPR. We ensure that your data is always treated in accordance with applicable data protection regulations and rely on secure storage and responsible use.

If you have any questions about this data usage, please feel free to contact us using the contact option provided below.

Comments and Discussions in the Blog

When you leave a post/comment or a review on the Vispronet® blog (https://www.vispronet.de/blog/), your IP address is stored. This is done based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR and serves the security of us as the website operator. As operators, we are obliged to protect ourselves against unlawful comments and posts on our platform and to ensure identification of the author if necessary. To write a comment, you must provide a valid email address, a name, and, if applicable, a valid website link. Your email address and personal data will not be published or passed on to third parties.

We reserve the right to delete comments containing threats or insults, advertising or illegal content, obvious backlink comments (especially SPAM) with irrelevant context or invalid email addresses, and to exclude the user from further use if necessary. The use of our comment function for commercial purposes is prohibited. By submitting the comment, you grant Sachsen Fahnen GmbH & Co. KG/Vispronet® an unlimited right of use for publication on our blog.

Use of Cookies

Cookies that are necessary for the electronic communication process or provide certain functions you request are stored in accordance with Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in using cookies to provide our services technically error-free and optimized. Other cookies, such as cookies for analyzing your browsing behavior, are addressed separately in this privacy policy. Cookies are small text files stored on your device. Some of the cookies we use are automatically deleted after the browser session ends, i.e., after you close your browser (so-called session cookies). Other cookies remain stored on your device and allow us to recognize your browser on your next visit (persistent cookies). You can configure your browser to be informed about the setting of cookies and decide individually whether to accept them or to exclude cookies for certain cases or generally. The management of cookie settings varies depending on the browser. Information on this can be found in your browser’s help menu, which explains how to change your cookie settings. Please refer to your web browser’s cookie settings for the duration of cookie storage. You can find these for the respective browsers at the following links:


If cookies are not accepted, the functionality of our website may be limited.
This website also uses the so-called DoubleClick cookie within the scope of Google Analytics application (see below), which serves to recognize your browser when visiting other websites. This is done to safeguard our legitimate interests in optimal marketing of our website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The information automatically generated by the cookie about your visit to this website is usually transmitted to a Google server in the USA and stored there. However, the IP address is shortened beforehand within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area by activating IP anonymization on this website. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google.

Google uses this information to create reports about website activities and to provide other services related to website usage. This serves to safeguard our legitimate interests in optimal marketing of our website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Google may also pass this information on to third parties if required by law or insofar as third parties process these data on behalf of Google. After the purpose and end of the use of Google DoubleClick by us, the data collected in this context will be deleted.
Google DoubleClick is an offering of Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). To the extent that information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. For companies certified under the Privacy Shield, an adequate level of data protection has been established based on agreements between the USA and the European Commission as well as Switzerland.

You can deactivate the DoubleClick cookie via this link. Furthermore, you can obtain information about cookie settings and make adjustments at the Digital Advertising Alliance. Finally, you can configure your browser to notify you about cookie settings and decide individually on their acceptance or exclude the acceptance of cookies for specific cases or generally. Please note that if cookies are not accepted, the functionality of our website may be limited.

Use of Google Services

Google services are used on our website. All information and applicable Google privacy policies can be viewed at: https://business.safety.google/privacy/.

Use of Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform independent analyses. It serves solely to manage and deploy the tools integrated through it. However, the Google Tag Manager does capture your IP address, which may also be transmitted to Google's parent company in the United States.

The use of Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If corresponding consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

Use of Google Analytics 4

This website uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of website usage.

When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files stored on your device that enable analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened at the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also involve transmission of information to servers of Google LLC in the USA and further processing of the information there.

When using Google Analytics 4, the IP address transmitted by your device during website use is always collected and processed only in an anonymized manner by default, so that direct personal identification of the collected information is excluded. This automatic anonymization occurs because the IP address transmitted by your device is shortened by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.

On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports about your website activities or usage behavior, and to provide us with other services related to your website and internet usage. The IP address transmitted and shortened by your device within Google Analytics 4 is not merged with other Google data. The data collected within the scope of Google Analytics 4 are retained for 2 months and then deleted.

Google Analytics 4 also enables the creation of statistics regarding age, gender, and interests of website users based on an evaluation of interest-based advertising and third-party information via a special function called "demographic characteristics." This allows the determination and differentiation of user groups of the website for the purpose of target group-optimized marketing measures. However, data collected via the "demographic characteristics" function cannot be assigned to any specific person and thus not to you personally. These data collected via the "demographic characteristics" function are retained for two months and then deleted.

All the above-described processing, especially the setting of Google Analytics cookies for storing and reading information on the device you use to access the website, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, the use of Google Analytics 4 during your website visit does not occur. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.

In connection with this website, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports ("Cross Device Tracking"). If you have activated "personalized ads" in your Google account settings and linked your internet-enabled devices with your Google account, Google can analyze usage behavior across devices with your consent to the use of Google Analytics 4 according to Art. 6 para. 1 lit. a GDPR and create database models based on this. This includes logins and device types of all website users who were logged into a Google account and performed a conversion. The data show, among other things, on which device you first clicked on an ad and on which device the related conversion occurred. We do not receive any personal data from Google but only statistics created based on Google Signals. You have the option to deactivate the "personalized ads" function in your Google account settings and thereby disable cross-device analysis in connection with Google Signals. Please follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de

Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, obliging Google to protect the data of our website users and not to disclose it to third parties.

To ensure compliance with the European data protection level also in the event of possible data transfers from the EU or EEA to the USA and further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.

Further legal information on Google Analytics 4, including a copy of the mentioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=de&gl=de

Details on the processing initiated by Google Analytics 4 and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

Google Ads Remarketing and Google Ads Conversion Tracking

We advertise this website via Google Ads in Google search results as well as on third-party websites. For this purpose, the so-called remarketing cookie from Google is set when visiting our website, which automatically enables interest-based advertising based on a pseudonymous cookie ID and the pages you have visited. This serves to safeguard our overriding legitimate interests in optimal marketing of our website within the scope of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. After the purpose ceases and the use of Google Ads Remarketing ends, the data collected in this context will be deleted.

Extended data processing only takes place if you have given Google consent to link your web and app browser history with your Google account and to use information from your Google account to personalize ads shown to you on the web. If you are logged into Google during your visit to our website, Google uses your data in connection with Google Analytics data to perform cross-device remarketing and create audience lists. In this process, your personal data is temporarily linked with Google Analytics data to define audiences.

Google Ads is an offering of Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
To the extent that information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield.
A current certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link. Additionally, you can obtain information about cookie settings and make adjustments at the Digital Advertising Alliance.

Within the scope of Google Ads, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user's computer. These cookies expire after 30 days and are not used for personal identification of users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with conversion tracking. However, they do not receive any information that would allow personal identification of users. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising. You can configure your browser to notify you about cookie settings and allow cookies only on a case-by-case basis, exclude the acceptance of cookies for specific cases or generally, and activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.


Use of Google ReCaptcha for Bot Protection

To prevent spam, our website uses "ReCaptcha" from Google Inc. This service is used to verify whether data input is made by an automated program (bot) or a human. Stored Google cookies, previous browser interactions, the duration of stay on the website, as well as the number of mouse movements and keystrokes are monitored. Subsequently, personal data such as IP address, date and time, geographic location, screenshot of the browser window, referrer URL, browser plugins, information about the operating system, cookies, and settings of the user device are forwarded for evaluation.

The storage of these cookies is based on Art. 6 para. 1 sentence 1 lit. f GDPR. The website operator has a legitimate interest in using ReCaptcha to prevent spam and thus ensure frustration-free use of the website.

YouTube Components with Enhanced Privacy Mode

On our website, we use components (videos) from the company YouTube, LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use the so-called "Enhanced Privacy Mode" of the provider to embed videos. In this mode, a cookie is only stored on your computer when the video is played. According to YouTube, no personal cookie information is stored for playback of embedded videos with enhanced privacy mode. If you want to ensure that no data about you is stored by YouTube, please do not click on the embedded videos. The use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on handling user data can be found in YouTube's privacy policy at:  https://www.google.de/intl/de/policies/privacy.


Bing Ads

This website uses Bing Ads, a program of Microsoft Corporation ("Microsoft") utilizing Universal Event Tracking (UET) to implement remarketing and conversion tracking. This is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
A cookie is set on your computer for this purpose if you accessed our website via Bing or Yahoo. This text file stores information about your use of our website, i.e., the pages you visited, for 180 days and is then deleted. This information includes, among other things, the URL of the visited page, the URL of the referring page, and your IP address. By using the remarketing function, we can present you with tailored offers during a later search on one of the aforementioned search engines.
If you do not agree with the collection of this information, you can disable the setting of cookies via your internet browser settings.
You can disable this behavior at http://choice.microsoft.com/de-de/opt-out.
Using the consumer opt-out page of the Network Advertising Initiative (NAI) http://www.networkadvertising.org/choices/ , you can check which participating sites set cookies in your browser and disable them. Microsoft's privacy policy regarding the handling of collected data can be accessed at the following link: https://privacy.microsoft.com/de-de/privacystatement/.
Further information about Bing's analytics services can be found on the Bing Ads website ( https://help.bingads.microsoft.com/#apex/3/de/53056/2 ).
The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

Freshchat

Our website uses the Freshchat service to provide our customers with a live chat option. Freshchat is an offering of Freshworks Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA.

When you use our live chat, the data you enter is transmitted to Freshchat and stored there. This data typically includes your name and email address, as well as the messages you send via the chat. The data is used exclusively to process your inquiries and for statistical purposes.

Freshchat uses cookies to enable the chat function. These cookies are stored on your computer and allow the chat to be resumed if you leave it and reopen it later. You can disable the use of cookies at any time via your browser settings.

The use of Freshchat is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to offer you a fast and uncomplicated communication option via our live chat.

Further information on Freshchat's data protection can be found in Freshworks' privacy policy at: Privacy Policy.

WhatsApp

For customer communication purposes, we use the live chat tool of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp"). This serves to safeguard our overriding legitimate interests in effective and improved customer communication within the framework of a balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. WhatsApp acts on our behalf. The phone numbers stored by us on our mobile device are automatically processed on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Only phone numbers of customers who have previously contacted us via WhatsApp and have therefore already accepted WhatsApp's terms of use and privacy policy are stored. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.

Integration of the Trusted Shops Trustbadge

To display our Trusted Shops quality seal and any collected reviews as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops Trustbadge is integrated on this website. This serves to safeguard our overriding legitimate interests within the scope of a balancing of interests in optimal marketing by enabling secure shopping in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offering of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided within the scope of order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also employs service providers from the USA. An adequate level of data protection is ensured. Further information on the data protection of Trusted Shops GmbH can be found here.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the access. Individual access data are stored in a security database for the analysis of security anomalies. The log files are automatically deleted no later than 90 days after creation.

Further personal data are transmitted to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or have already registered for use. The contractual agreement concluded between you and Trusted Shops applies. For this purpose, personal data are automatically collected from the order data. Whether you as a buyer are already registered for product use is automatically checked based on a neutral parameter, the cryptographically one-way hashed email address. The email address is converted into this hash value, which cannot be decrypted by Trusted Shops, before transmission. After verification of a match, the parameter is automatically deleted.

This is necessary to fulfill our and Trusted Shops’ overriding legitimate interests in providing the buyer protection linked to the specific order and the transactional review services pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Further details, including information on objection, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.

Review Reminders via Email

If you have given us your explicit consent during or after your order by activating a corresponding checkbox or clicking a designated button, we use your email address to request a review of your order via the review system we employ. This consent can be revoked at any time by sending a message to the contact option described below.

Payments via VISA, MASTERCARD, Maestro, and Sofortüberweisung

For payments via MasterCard, VISA, and Maestro cards as well as Sofortüberweisung, Vispronet® uses a payment service provider to process your payment data and handle the payment for orders. Vispronet® itself does not process payment information such as account details or credit card data on its own systems. The payment service provider is Computop Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, 96050 Bamberg. Computop is certified according to the "Payment Card Industry (PCI) Data Security Standard" of the credit card companies. After you have initiated a paid order, we transmit the following information to Computop for the purpose of executing and processing the contract concluded with you: invoice amount, name, address, email address, credit card number, cardholder, expiration date, CSV, individual order items, and unit price of the article. Further information on data protection at Computop can be found at https://de.computop.com/datenschutz/.
The transmission of your data to Computop is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract).


Payment Method PayPal

If you choose to pay with the online payment service PayPal during the ordering process, your contact data will be transmitted to PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg as part of this order. The transfer is made in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or—if offered—"purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transmitted to credit agencies pursuant to Art. 6 para. 1 lit. f GDPR based on PayPal’s legitimate interest in determining your creditworthiness. The result of the credit check regarding the statistical probability of default is used by PayPal to decide on the provision of the respective payment method. The credit check may include probability values (so-called score values). If score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data. Further data protection information, including the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contract-compliant payment processing.


Payment Method Klarna Purchase on Account and Klarna Direct Debit

In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer the following payment options. Payment is made to Klarna in each case:

  • Invoice: The payment term is 30 days from the shipment of the goods. The invoice terms can be found here.
  • Direct debit: The debit is made after shipment of the goods. The date will be communicated to you by email.

The use of the payment methods invoice and direct debit requires a positive credit check. Further information and Klarna’s user terms can be found here. Your personal data will be processed by Klarna in accordance with applicable data protection regulations and according to the information in Klarna’s privacy policy.

To offer you Klarna’s payment options, we will transmit personal data such as contact details and order data to Klarna. This allows Klarna to assess whether you can use the payment options offered via Klarna and to tailor the payment options to your needs. General information about Klarna can be found here. Your personal data will be processed in accordance with applicable data protection regulations.

Payment Method Prepayment

If you choose one of these payment methods in our online shop, we do not collect any personal data from you beyond the information necessary for your order.


Our Online Presence on Social Platforms and Networks

Our presence on social networks and platforms serves to enable better, active communication with our customers and interested parties. We provide information there about our products and ongoing special promotions. When visiting our online presences on social media, your data may be automatically collected and stored for market research and advertising purposes. Using pseudonyms, so-called usage profiles are created from this data. These can be used, for example, to display advertisements within and outside the platforms that presumably correspond to your interests. For this purpose, cookies are generally used on your device. These cookies store visitor behavior and user interests. This serves, according to Art. 6 para. 1 lit. f GDPR, to safeguard our overriding legitimate interests in the context of a balancing of interests for an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (agreement) to data processing, e.g., by means of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR. Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: For the USA, an adequacy decision by the European Commission exists. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
Detailed information on the processing and use of data by the providers on their sites, as well as contact options and your related rights and settings options to protect your privacy, especially objection options (opt-out), can be found in the privacy notices of the providers linked below. Should you still require assistance in this regard, you may contact us.

Objection Option (Opt-Out):

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)

If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims (objection pursuant to Art. 21 para. 1 GDPR). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 para. 2 GDPR).
Please direct your related requests to: dsb@sachsenfahnen.de

Your Rights and Contact Options

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
  • pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate or completion of your personal data stored with us;
  • pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing
    - is necessary for exercising the right to freedom of expression and information;
    - is required to comply with a legal obligation;
    - is necessary for reasons of public interest; or
    - is necessary for the establishment, exercise, or defense of legal claims;
  • pursuant to Art. 18 GDPR, the right to request restriction of the processing of your personal data, insofar as
    - the accuracy of the data is contested by you;
    - the processing is unlawful, but you oppose the deletion;
    - we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims; or
    - you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller;
  • pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. Generally, you may contact the supervisory authority of your habitual residence, place of work, or our company’s registered office.

Data Deletion

The data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and no statutory retention obligations prevent deletion. If user data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.
According to legal requirements, retention is for 6 years pursuant to § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, booking documents, etc.) and for 10 years pursuant to § 147 para. 1 AO (books, records, management reports, booking documents, commercial and business letters, tax-relevant documents, etc.).

Right to Information and Contact Details
You have the right to free information about the data stored by us concerning you as well as, if applicable, the right to correction, blocking, or deletion of this data. For questions regarding the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, as well as revocation of any consent given or objection to specific data use, please contact our company data protection officer:

Data Protection Officer
Am Wiesengrund 2
01917 Kamenz
Germany

Phone: +49 (0) 3578 359-0
E-mail: dsb@sachsenfahnen.de

In the event of data protection violations, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Officer of the federal state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Status: October 2024