Privacy policy

Thank you for your interest in our online shop. The protection of your privacy is very important to us. When you use our services, you trust us with your data. We are aware that this is a big responsibility and we do everything possible to protect your data and to assure that you maintain the control over your data.

In this privacy statement, you learn which data we collect, why we collect it and how you can update, manage, alter or delete your information. Hereafter we provide you with detailed information regarding the handling of your data.

GENERAL INFORMATION

The following information provides a basic overview of what happens with your personal data when you visit our website. Personal information is any data by which you could be personally identified. More information regarding data protection can be found below in our Declaration of Data Protection.

  1. Data collection on our website
  2. Which data do we collect and why?
  3. General information and mandatory information
  4. Data processing for the purpose of payment
  5. Marketing via E-mail
  6. Contact possibilities and your rights
  7. Designation of a data protection officer as mandated by law
  8. Data collection on our website
  9. Analytic tools, advertising & PlugIns
  10. Payment service providers
  1. Data collection on our website

Responsibility for data processing

The data processing on this website is undertaken by the website operators of
Abacus Resale GmbH
Gutenbergstr. 29
67240 Bobenheim-Roxheim
Tel: +49 6239 / 99 74 360
E-mail: resale@ab-resale.com

  1. WHICH DATA DO WE COLLECT AND WHY?

How do we collect your access data?

You can visit our website without disclosing any personal information. Abacus Resale collects data every time a user accesses a page on our website. This data is collected automatically by our IT-systems when you visit our website. This consists primarily of technical details (e.g. name of the retrieved website, file accessed, date and time of the visit, volume of data transmitted, notification whether data retrieval was successful, type and version of the browser used, operating system utilised, referrer (URL of the previous page visited), IP-address and the internet service provider). This data is recorded automatically as soon as you begin to browse on our website. In compliance with the legal requirements, Abacus Resale uses the protocol data (logs) in an anonymous form with no reference to the person (user) or any other profiling for the statistical evaluations required for operational purposes, security and the optimisation of our online offer. This access data is evaluated solely to ensure the fault-free operation of the site and to improve our services. In accordance with Art. 6 Sect. 1 S. 1 lit. f GDPR, this serves so safeguard our legitimate interests in respect of a correct presentation of our online presence – these are predominant when weighing up the interests involved. The provider reserves the right to subsequently check the log data if, based on specific indications, there is justified suspicion of illegal usage. All access data will be deleted no later than seven days after the end of your visit to the site.

Data collection for contract processing, making contact and for the opening of a customer account, processing and utilisation of personal data

We collect the personal data which you voluntarily submit to us when you place an order or contact us (e.g. via the contact form or by e-mail). Mandatory fields are marked as such because we need this data to perform the contract or to process your contact request – without this data you would not be able to complete your order or send the contact request. In each input form it is evident which data is collected. We utilise the data disclosed to us to perform the contract and to process enquiries in accordance to Art. 6 Sect. 1 lit. f GDPR. Personal data is only processed and utilised by Abacus Resale when this legally permitted or if you have given your consent. Generally, the user can recognise which data is captured when using our service. Your customer account can be deleted at any time, either by sending a message to the contact option specified below or through the function provided in the customer account.

Personal data (e.g. name, e-mail address, mailing address and payment data) submitted for the purpose of ordering goods are utilised by abacus Resale solely for the purposes of executing and handling the contract. This data is treated confidentially, transmitted in encrypted form and not made available to third parties who are not involved in the ordering, delivery and payment procedures. When the provider is contacted (via the contact form or e-mail), the user’s details are stored for processing purposes and in case follow-up questions arise. We have implemented organisational, contractual and technical security measures to ensure that the provisions of the Data Protection Act are adhered to and that coincidental or intentional manipulations, loss, destruction or access by unauthorised persons are avoided.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyse how visitors use the site. The personal data collected within the framework of the Abacus Resale webpages will be used only for the purpose of contract execution and the processing of your enquiries. Processing and use of your data for the purposes of consultation, marketing and market research shall only take place with your explicit consent. If your consent regarding the above-mentioned purposes also includes the transfer of data to companies related to Abacus Resale or additional third parties named in the declaration of consent, your data may be transferred. Otherwise there shall be no transfer of your data.

 

What rights do you have regarding your data?

You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. Should you have further questions about the issue of privacy and data protection, you can contact us at any time by using the address given in the legal notice. Furthermore, you may file a complaint with the regulatory authority for data protection. You can withdraw your consent at any time with effect for the future.

  1. General information and mandatory information

Data protection

Abacus Resale, the operators of this website take the protection of your personal data very seriously. We treat your data confidentially and in accordance with the legal data protection regulations and this privacy protection policy.

If you use this website, a variety of personal data will be collected. Personal information is any data by which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

However, we point out that data transmitted via the internet (e.g. e-mail communication) may be subject to security breaches. Complete protection of your data from third-party access is therefore not possible.

Information regarding the party responsible for this website

The party responsible for processing data on this website is:

Abacus Resale GmbH
Gutenbergstr. 29
67240 Bobenheim-Roxheim
Tel: +49 6239  997 4360
E-Mail: resale@ab-resale.com

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal e-mail making this request is sufficient. The data processed prior to receiving your request may still be legally processed.

The right to file complaints with regulatory authorities

In case of a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the Federal Data Protection Commissioner of the German province in which our company is registered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/EN/Home/home_node.html

Right to data portability

You have the right to have the data which we processed automatically and that was based on your consent or in fulfilment of a contract, delivered to yourself or to a third party in a standard, machine-readable format. Should you require the direct transfer of data to another responsible party, this will only be carried out to the technically feasible extent.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of confidential content, such as the inquiries you send to us as the site operator. An encrypted connection can be recognised in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.

When the SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Encrypted payment transactions on this Website

If a chargeable contract is concluded which requires you to provide us with your payment data (e.g. account number for direct debit authorisation), then this data is required for payment processing.

The payment transactions via a common mode of payment (Visa/MasterCard, direct debiting) are processed solely via an encrypted SSL or TLS connection. An encrypted connection can be recognised when address bar in the browser changes from “http://” to “https://” and also by the padlock icon displayed in your browser’s status bar.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Information, blocking and deletion

In accordance to the applicable legal regulations, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.

Objection to advertising and promotional e-mails

We hereby expressly prohibit the utilisation of contact data published in the context of website legal notice requirements with regard to sending promotional or informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as e-mail spam, is received.

  1. Data processing for the purpose of payment

For part of the payment process in our online shop, we work together with these partners: credit institutions, payment service providers.

4.1 Data processing for the purpose of transaction processing

Depending on the selected payment method selected, we forward the data necessary for processing the payment transaction to the authorised credit institutions or to the selected payment service providers, insofar as this is necessary for the payment process. This serves the fulfilment of the contract according to Art. 6 Sect. 1 lit. b GDPR. In certain cases, payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical solution within the ordering process. In this respect, the privacy policy of the respective payment service provider applies. If you have any questions regarding our payment processing partners and the basis of our collaboration with them, please use the contact option as described in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and optimisation of our payment processes

Where appropriate, we may forward further data to our service providers (see previous paragraph), which they, together with the data necessary to process the payment, use for the purpose of fraud prevention and to optimise our payment processes (e.g. invoicing, processing of contested payments, accounting support).

This serves to safeguard our legitimate interests in fraud prevention, more specifically an efficient payment management in accordance with Art. 6 Sect. 1 lit. f GDPR.

4.3 Engagement of a collection service provider

Insofar as our request for payment is not settled in spite of previous reminders, we will forward your data to an authorised collection service provider. In this case, our claim shall be collected directly by the collection service provider. This serves to safeguard our legitimate interests in fraud prevention or an efficient payment management in accordance with Art. 6 Sect. 1 lit. b GDPR.

  1. Marketing via E-mail

E-mail newsletter upon registration

When you subscribe to our newsletter, we will send you our e-mail newsletter regularly, based on your consent according to Art. 6 (1) (a) GDPR, using the data required or separately disclosed by you separately for this purpose.

You can unsubscribe from the newsletter at any time. This can either be done by sending a message to the contact option described in this privacy policy or via a link provided in the newsletter for this purpose. After unsubscribing, we will delete your e-mail address from the list of recipients, unless you have expressly consented to the further use of your data or if we have reserved the right to use your data for other purposes that are permitted by law and about which we inform you in this privacy policy.

  1. Contact possibilities and your rights

As the affected party, you have the following rights according to:

  • 15 GDPR, the right to obtain information about your personal data which we process, within the scope described therein
  • 16 GDPR, the right to demand immediate rectification of incorrect or completion of your personal data stored by us
  • 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing is required
  • to exercise the right of freedom of expression and information
  • for compliance with a legal obligation
  • for reasons of public interest or
  • for establishing, exercising or defending legal claims
  • 18 GDPR, the right to request limitation of processing of your personal data, insofar as
  • the accuracy of the data is disputed by you
  • the processing is unlawful, but you refuse their erasure
  • we no longer need the data, but you need it to establish, exercise or defend legal claims, or
  • you have lodged an objection to the processing in accordance with Art. 21 GDPR
  • 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller
  • 77 GDPR, the right to complain to a regulatory authority. As a rule, you can contact the regulatory authority at your usual place of residence or workplace or at our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, requests for information, correction, restriction or deletion of your data, to withdraw any consents you have given, or opt-out of any particular data use, please contact us directly using the contact data provided in our supplier identification.

  1. Designation of a data protection officer as mandated by law

Abacus Resale has an appointed data protection officer.
Mustafa Gencyilmaz
Gutenbergstraße 29
67240 Bobenheim-Roxheim
Telephone: +49 6239 99 74 362
E-Mail: datenschutz@ab-resale.com

Right to object

Insofar as we process personal data as explained above in order to safeguard our legitimate interests (which are predominant in a balancing of interests), you may object to such data processing with future effect. If the date processing is done for the purpose of direct marketing, you can exercise this right at any time as described above. Insofar as the processing takes place for other purposes, you are only entitled to object on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for such purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

This does not apply to the processing of personal data for direct marketing purposes. In such a case we will no longer process your personal data for such purposes.

  1. Data collection on our website

Cookies

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help to make our website more user-friendly, efficient, and secure. Cookies are small text files, which are transmitted to your computer by a website. These are stored on your computer and saved by your browser.

Most of the cookies that we use are so-called “session cookies.” They are automatically deleted after your visit Other cookies will remain archived on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website. In the cookies provided, login information assigned to you (user-name, user authorisations and validity of the session) are stored for access control. If required, the server requests your data for proof of identity. Instead of the renewed input of your login information, the cookie is sent to the server and is accepted.

Cookie validity, managing and deletion

The validity of the cookies is restricted exclusively to your visit to our website. When you exit the browser, the data will be treated according to your personal settings.No linkage is made to your personal data. Modern browsers enable you to configure your cookies and to maintain full control.

You can configure your browser to notify you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (e.g.  the shopping cart) are stored pursuant to Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimal provision of the operator’s services. If other cookies (e.g. cookies used for the analysis of your browsing patterns) should be stored, they will be addressed separately in this privacy policy.

The cookie settings for your browser can be found under the following links:

Microsoft Edge™ https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies
Safari™ https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Chrome™ https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox™ https://support.mozilla.org/de/products/firefox/protect-your-privacy/cookies
Opera™ https://help.opera.com/de/latest/web-preferences/#cookies

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

These data will not be combined with data from other sources.

The basis for data processing is Art. 6 Sect. 1 lit. f GDPR, which allows the processing of data for the fulfilment of a contract or for precontractual measures.  

Contact form

When you send us an inquiry via the contact form, we collect the data entered on the form, including the contact details you provide, to answer your inquiry and for any follow-up questions. We do not share this information without your consent.

On the basis of your consent, we process any data you entered onto the contact form as per Art. 6 Sect. 1 lit. a GDPR. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request will remain unaffected an may still be legally processed.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory legal regulations, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Registration on this website

You can register on our website in order to access additional functions offered on the website. The data entered will only be used for the purpose of use for the respective site or service for which you have registered.  The mandatory information requested during registration must be provided in full. Otherwise, your registration will be rejected.

To inform you about important changes such as those within the scope of offer or technical changes, we will use the e-mail address specified during registration.

We will process the data provided during registration based on your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request will remain unaffected an may still be legally processed.

We will continue to store the data collected during registration for as long as you remain registered on our website, subsequently they shall be deleted. Any mandatory data retention periods, remain unaffected.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent necessary for the justification, content organisation or change of the legal relationship (data inventory). These actions are taken on the basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process and use personal data concerning the use of this website (usage data) only to the extent that this is necessary to make it possible for users to utilise the services and to bill for them, if applicable.

The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.

Data transmitted when entering into a contract with online shops, retailers, and mail order

We only transmit personally identifiable data to third parties to the extent that is required to fulfil the terms of your contract, for example, to companies entrusted to carry out the delivery of your goods or payment service providers / credit institutions entrusted to process your payments. There shall be no further transmission of your data unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

The basis for data processing is Art. 6 Sect. 1 lit. b GDPR, which allows the processing of data for the fulfilment of a contract or for precontractual measures. 

  1. Analytic tools, advertising & PlugIns

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Insofar as you have consented to the use of the technologies pursuant to Art. 6 Sect. 1 lit. a GDPR, you may revoke your consent at any by sending a message to the contact option described in the data protection declaration.

reCAPTCHA is used to check whether data entered on this website (for example in a contact form) is being entered by a human or an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor using various features. This analysis starts automatically as soon as the website visitor opens the website. reCAPTCHA evaluate various information for its analysis (for example IP address, time spent by the visitor on the website and mouse movements by the user). The data recorded during the analysis are forwarded to Google and may also be shared with other third parties.

The reCAPTCHA analyses are run completely in the background. Website visitors are not notified that an analysis is taking place.

The data is saved and analysed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web services from abusive automated spying and SPAM.

More information about Google reCAPTCHA is available in the Google privacy policies and Google conditions of use by clicking on the following link: https://www.google.com/intl/de/policies/privacy/ und https://www.google.com/recaptcha/intro/android.html.

Google Web Fonts

This page uses Google Web Fonts for the uniform depiction of typefaces. When a page is accessed, your browser loads the necessary typeface into the browser cache to display the texts using the font chosen by the designer correctly.

To do this, the browser you use must connect to Google’s servers. As a result, Google is informed that our website has been accessed via your IP address. The use of Google Fonts is in the interest of a consistent and appealing presentation of our website. This constitutes a legitimate interest according to Art. 6 Sect. 1 lit. f GDPR.

If your browser does not support web fonts, a default font will be used by your computer.

More information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://www.google.com/policies/privacy/. 

Integration of the Trusted Shop’s Trustbadge®

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops Trustmark and the collected reviews as well as to offer Trusted Shops products to buyers after an order..

This is necessary to safeguard our legitimate prevailing interests in an optimal marketing by ensuring the safety of your purchase according to Art. 6 Sect. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is called up, the web server automatically saves a server log file which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data shall not be evaluated and will be overwritten automatically overwritten within seven days after the end of your visit to the website.
Further personal data will only be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case, the contractual agreement made between you and Trusted Shops shall apply.

  1. Payment service providers

PayPal

Our website accepts payments via PayPal. The provider of this service is PayPal (Europe) S.à.r.l & Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you opt for payment via PayPal, the payment data you provide shall be supplied to PayPal

The transmission of your data to PayPal is based Art. 6 Sect. 1 lit. a GDPR (consent) and Art. 6 Sect. 1 lit. b GDPR (processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.