Privacy Policy

Thank you for your interest in our online shop. Protecting your privacy is of utmost importance to us. Below, we provide you with detailed information on how we handle your data.

Controller for Processing Your Personal Data
ars mundi
Edition Max Büchner GmbH
Bödekerstraße 13
30161 Hanover, Germany

1. Access Data and Hosting

You can visit our websites without providing any personal information. When you access any webpage, the web server automatically stores a server log file, which contains information such as the name of the requested file, your IP address, the date and time of access, the data volume transmitted, and the requesting provider (access data) and documents the access.

This access data is evaluated exclusively to ensure the proper functioning of the site and to improve our services. In accordance with Art. 6 (1) lit. f GDPR, this serves to protect our legitimate interests in the proper presentation of our offering, which outweigh our interests in the context of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the site.

Hosting Services by a Third-Party Provider

As part of processing on our behalf, a third-party provider provides hosting and website display services for us. This serves to protect our legitimate interests in the proper presentation of our offering as part of a balance of interests. All data collected in the course of using this website or in designated forms in the online shop, as described below, will be processed on its servers. Processing on other servers will only takes place within the scope explained here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data Collection and Use for Processing Orders and Opening Customer Accounts

We collect personal data if you voluntarily provide it during your order, when contacting us (e.g., via contact form or email), or when registering for a customer account. Mandatory fields are marked as such because, in these cases, we absolutely need the data to process the contract, or to process your contact inquiry, or open your customer account, and you cannot complete your order, send your contact inquiry, or open your customer account without providing this information. The data collected is evident from the respective input forms. We use the data provided by you for the purpose of processing your orders and responding to your inquiries in accordance with Art. 6 (1) 1 lit. b GDPR. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of the retention period required by tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are legally permitted and about which we inform you in this privacy policy. You can delete your customer account at any time. For this purpose, you can either send a message to the contact option described below or by using the function provided for this purpose in the customer account.

3. Data Transfer

For the purpose of contract performance according to Art. 6 (1) 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery of the ordered goods, to the extent necessary for the delivery of ordered goods. Depending on the payment service provider you have selected during the ordering process, we pass on the payment details collected for this purpose to the bank commissioned with the payment and, if applicable, to the payment service provider commissioned by us, or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In such a case, you must log in to the payment service provider with your access data during the ordering process. In this regard, the privacy policy of the respective payment service provider applies.
Occasionally, we disclose certain data (name and address) according to Art. 6 (1) 1 lit. a GDPR, recital 47, to carefully selected companies whose products may be of interest to you. If you do not wish to receive further advertising from these companies, you can object to this at any time.

4. Email Newsletter and Postal Advertising

Email Advertising with Newsletter Registration

If you subscribe to our newsletter, we will use the data required or separately provided by you to send you our email newsletter based on your consent according to Art. 6 (1) 1 lit a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address, unless you have expressly consented to the further use of your data or we reserve the right to further use your personal data for other purposes that are legally permitted and about which we inform you in this privacy policy.

Email Advertising Without Newsletter Registration and Your Right to Object

If we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right, in accordance with §7 (3) of the German Act Against Unfair Competition (UWG), to regularly send you email offers for similar products, such as the ones already purchased, from our range. This serves to protect our legitimate interests in advertising our products to customers.
You can object to this use of your email address at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising email, without incurring any costs beyond the basic cost of transmission according to the basic rates.

The newsletter is sent as part of processing on our behalf by a service provider to whom we pass on your email address for this purpose.

This service provider is located within a country of the European Union or the European Economic Area.

Postal Advertising and Your Right to Object

In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g., to send you interesting offers and information about our products by postal mail. This serves to protect our legitimate interests in advertising our products to customers in accordance with Art. 6 (1) 1 lit. f GDPR.

The advertising mailings are provided as part of processing on our behalf by a service provider to whom we pass on your data for this purpose.

You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

5. Data Use in Payment Transactions

Credit Check

If we make advance payments, e.g., for the purchase on account, it is necessary to obtain identity and credit information from specialised service providers (credit reporting agencies) in order to conclude the contract in accordance with Art. 22 (2) lit. a GDPR. For this purpose, we transfer your personal data required for a credit check to the following companies:

informa Solutions GmbH
Rheinstraße 99
76532 Baden-Baden, Germany

or

WID Wirtschafts-Informations-Dienst GmbH
Schwägrichenstr. 3
04107 Leipzig, Germany

Appropriate measures to safeguard your rights, freedoms and legitimate interests will be considered. You can present your standpoint by contacting the contact option described below and disputing the decision. After complete processing of the contract, your data will be deleted for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are legally permitted and about which we inform you in this privacy policy.

6. Integration of the Trusted Shops Trustbadge

To display our Trusted Shops quality seal and offer the Trusted Shops membership for buyers after placing an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to protect our legitimate interests in optimal marketing of our offering based on a balance of interests according to Art. 6 (1) 1 lit. f GDPR. The Trustbadge and the advertised services are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is called up, the web server automatically stores a so-called server log file, which also contains e.g., your IP address, the date and time of the call, the data volume transferred, and the requesting provider (access data), and documents the call. These access data are not evaluated and are automatically deleted no later than seven days after the end of your visit to the site.

Further personal data will only be transferred to Trusted Shops GmbH if you have given your consent, have decided to use Trusted Shops products after completing an order, or have already registered for use. In this case, the contract concluded between you and Trusted Shops applies.

7. Cookies and Web Analysis

To make your visit to our website attractive and to enable the use of certain functions, to display suitable products, or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests in an optimised presentation of our offering in accordance with Art. 6 (1) 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognise your browser on your next visit (persistent cookies). You can see the duration of storage in the cookie settings of your web browser. You can configure your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Every browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer™: https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Safari™: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
Chrome™: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Firefox™ https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Opera™ : https://help.opera.com/en/latest/web-preferences/#cookies

If you do not accept cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for Web Analysis

This website uses Google (Universal) Analytics for website analysis, a web analysis service provided by Google LLC (www.google.de). This serves to protect our legitimate interests in an optimised presentation of our offering according to Art. 6 (1) 1 lit. f GDPR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is generally transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, your IP address will be shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted your browser as part of Google Analytics will not be merged with other Google data. After the purpose and end of the use of Google Analytics by us, the data collected in this context will be deleted.

Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on your end device. If you delete your cookies, you must click the link again.

You can view and edit your current cookie setting here.

8. Online Marketing

Google AdWords Remarketing

We use Google AdWords to advertise this website in Google search results and on third-party websites. To do this, when you visit our website, a Remarketing Cookie is set by Google, which automatically uses a pseudonymous cookie ID and based on the pages you visit, enables interest-based advertising. This serves to protect our legitimate interests in the optimal marketing of our website according to Art. 6 (1) 1 lit. f GDPR. After the purpose and end of the use of Google AdWords Remarketing by us, the data collected in this context will be deleted.

In addition, any further data processing will only take place if you have consented to Google linking your web and app browser history to your Google account and using information from your Google account to personalize ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data along with Google Analytics data to create and define target group lists for cross-device remarketing. Google temporarily links your personal data to Google Analytics data to create target groups.

Google AdWords Remarketing is offered by Google LLC (www.google.com). Google LLC is headquartered in the USA und and is certified under the EU-US-Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link. In addition, you can obtain information from the Digital Advertising Alliance on the setting of cookies and configure your preferences accordingly.

9. Contact Options and Your Rights

As the data subject, you have the following rights:

  • In accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
  • In accordance with Art. 16 GDPR, the right to demand immediate correction of incorrect or completion of your personal data stored by us;
  • In accordance with Art. 17 GDPR, the right to demand the deletion of your personal data stored by us, except for further processing
    - to exercise the right to freedom of expression and information;
    - for the fulfilment of a legal obligation;
    - for reasons of public interest, or
    - for the assertion, exercise, or defence of legal claims;
  • In accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data to the extent
    - the accuracy of the data is disputed by you;
    - the processing is unlawful, but you refuse to delete it;
    - we no longer need the data, but you need it to assert, exercise or defend legal claims, or
    - you have lodged an objection to the processing in accordance with Art. 21 GDPR;
  • In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided us with in a structured, common, and machine-readable format or to request its transfer to another responsible party;
  • In accordance with Art. 77, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters for this purpose.

For questions regarding the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, as well as the revocation of granted consent or objection to a particular use of data, please contact:

ars mundi
Edition Max Büchner GmbH
Marc Marschner
Bödekerstraße 13
30161 Hanover, Germany

datenschutzbeauftragter@arsmundi.de


Right of Objection

Insofar as we process personal data as explained above to protect our legitimate interests, which prevail in the context of a balance of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you are only entitled to a right of objection if there are reasons arising from your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

This does not apply if the processing is for direct marketing purposes. In that case, we will not further process your personal data for this purpose.