DATA PROTECTION
Data Privacy Declaration
The following Data Privacy Declaration applies for use of our website “www.revoltage.rocks”.
Data protection is highly important to us. Your personal data will be collected and processed in accordance with applicable data protection law regulations, in particular the General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for the collection, processing, and use of your personal data in the sense of Art. 4 no. 7 GDPR is:
KLS Vertriebs GmbH
An der Fahrt 13
55124 Mainz
e-mail: viva@kls-vertriebs-gmbh.de
2. Name and address of the Data Protection Officer
You can contact our responsible Data Protection Officer at:
KLS Vertriebs GmbH
Dominik Burda
An der Fahrt 13
55124 Mainz
e-mail: datenschutz@kls-vertriebs-gmbh.de
If you want to object to the collection, processing, or use of your data by us in accordance with this data protection policy as a whole, or with respect to individual measures, you can submit your objection to the controller.
You can save and print out this Data Privacy Declaration at any time.
3. General purposes of processing
In general, we only process the personal data of our users if this is necessary to provide a functional website and to provide our content and services. We typically only process our users’ personal data after we have received consent to do so from the user. In some exceptional cases, we may not be able to obtain prior consent due to the circumstances of the situation, but may process your data if permitted by law.
3.1 Hosting
We make use of hosting in order to provide the following services: Infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance services, which we use for the purpose of operating the website.
To do so, we or our hosting provider process inventory data, contact details, content data, contractual data, usage data, meta and communication data from customers, potential buyers and visitors to this website based on our legitimate interest in efficient and secure provision of our website pursuant to Art. 6 para. 1 clause 1 f) GDPR in conjunction with. Art. 28 GDPR.
3.2 Access data
We collect information about you when you use this website. We automatically collect information on your usage behavior and your interactions with us, and register data about your computer or mobile device. We collect, save, and use data each time our website is used (so-called server log files). The access data includes:
-
Name and URL of the accessed file
-
Date and time of access
-
Quantity of data transmitted
-
Notification that access was successful (HTTP response code)
-
Browser type and version
-
Operating system
-
Referrer URL (e.g., the page visited directly before)
-
Websites accessed by the user’s system from our website
-
The user’s internet service provider
-
IP address of the requesting provider
We use this log data without associating it with you personally or otherwise creating a profile for statistical analyses, for the purpose of operation, security, and optimization of our website, as well as to anonymously record the number of visitors to our website (traffic) and regarding the scope and type of use of our website and services, likewise for statistical purposes, in order to measure the number of clicks received from cooperating partners. We can provide personalized, location-specific content based on this information and analyze data traffic, search for and correct errors, and improve our services.
We also have a legitimate interest in doing so in accordance with Art. 6 para. 1 clause 1 f) GDPR.
We reserve the right to review log data subsequently, if there are specific reasons for us to have a legitimate suspicion of illegal use. We save IP addresses in log files for a limited time period if this is necessary for security purposes or to perform our services or bill a service, for instance if you use one of our offers. After an order process is canceled, or after payment is received, we delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a concrete suspicion of illegal activity associated with the use of our website. In addition, we save the date of your last visit as part of your account (for instance upon registration, login, clicking links, etc.).
3.3 Cookies
We use so-called session cookies to optimize our website. A session cookie is a small text file sent by a server when you visit a website and saved on your hard drive on an intermediate basis. This file itself contains a so-called session ID that can be used to attribute different requests by your browser to the overall session. This allows us to recognize your computer once again when you return to our website. These cookies are deleted after you close your browser. They are used, for instance, to allow you to use the shopping cart function across multiple pages.
We also use a small number of persistent cookies (also small text files saved on your device); these remain on your device, and make it possible for us to recognize your browser during your next visit. These cookies are saved on your hard drive and deleted automatically after the specified time. They have a lifetime of 1 month to 10 years. This helps us to present our website in a more user-friendly, effective, and secure manner, and display information on the page which is specifically tailored to your interests, for instance.
We have a legitimate interest in using cookies in accordance with Art. 6 para. 1 clause 1 f) GDPR for the purpose of making our website more user-friendly, effective, and secure.
The cookies store the following data and information, for instance:
-
Login information
-
Language settings
-
Search terms entered
-
Information on the number of times our website was accessed and the use of individual functions of our website.
If the cookie is activated, it will be assigned an identification number, and your personal data will not be associated with this identification number. Your name, IP address, or similar data which would make it possible to associate the cookie with you is not saved in the cookie. Based on the cookie technology, we only receive pseudonymized information, for instance on which pages of our shop you visited, which products you viewed, etc.
You can change your browser settings so that you will be informed in advance when cookies are saved, and you can choose in each individual case whether you want to exclude acceptance of cookies in certain cases or in general, or exclude acceptance of all cookies. This may restrict the functionality of the website.
3.4 Data to fulfill our contractual obligations
We process personal data which we need to fulfill our contractual obligations, such as your name, address, e-mail address, ordered products, invoice, and payment data. We must collect this data in order to conclude the contract.
The data is deleted after the end of the warranty periods and any statutory retention periods. Data that is linked to a user account (see below) will be retained in every case for as long as this account is managed.
The legal basis for processing this data is Art. 6 para. 1 clause 1 b) GDPR, because this data is required for us to fulfill our contractual obligations towards you.
3.5 User account
You can create a user account on our website. If you want to do so, we will need the personal data requested when you log in. If you log in later, only your e-mail or user name and your selected password will be required.
We collect master data (such as your name, address), communication data (such as your e-mail address), and payment data (banking information) as well as access details (user name and password) when you register as a new user.
In order to ensure proper registration and prevent unauthorized registrations by third parties, you will receive an activation link via e-mail after your registration, to activate your account. Only after you have completed your registration will we permanently save the data you provided in our system.
Once you have created your user account, we can delete it at any time without this resulting in any costs beyond the costs of transmission, at the base rates. Notification in text form to the contact information provided under clause 1 (such as via e-mail, fax, letter) will be sufficient. In this case, we will delete your saved personal data if we do not have to save it to process orders or based on statutory retention obligations.
The legal basis for processing this data is your consent according to Art. 6 para. 1 clause 1 a) GDPR.
3.6. Newsletter
The data requested during the registration process is required to register for the newsletter. Registration for the newsletter is logged. After registration, you will receive a message to the provided e-mail address requesting that you confirm your registration (“double opt in”). This is required so that a third party cannot register using your e-mail address.
You can revoke your consent to receive the newsletter at any time, thereby unsubscribing from the newsletter.
We will save your registration data for as long as it is required to send the newsletter. We will save the log of your registration and your mailing address for as long as we have an interest in verifying the original consent; generally, this will be for the length of the statute of limitations for civil law claims, or a maximum of three years.
The legal basis for sending the newsletter is your consent according to Art. 6 para. 1 clause 1 a) in conjunction with Art. 7 GDPR, in conjunction with Sec. 7 para. 2 no. 3 UWG (Unfair Competition Act). The legal basis for logging registration is our legitimate interest in verifying that the newsletter was sent with your consent.
You can revoke your registration at any time, without incurring any costs beyond the transmission cost at the base rates. Notification in text form to the contact information provided under clause 1 (such as via e-mail, fax, letter) will be sufficient. Of course, each newsletter contains an unsubscribe link.
​
3.7 Product recommendations
Independently of the newsletter, we will regularly send you product recommendations via e-mail. In this way, we can provide you with information regarding products we offer, which you may be interested based on the goods or services you most recently purchased from us. We strictly comply with legal specifications in doing so. You can object to this at any time, without incurring any costs beyond the transmission cost at the base rates. Notification in text form to the contact information provided under clause 1 (such as via e-mail, fax, letter) will be sufficient. Of course, each e-mail also contains an unsubscribe link.
The legal basis in this case is our statutory permission according to Art. 6 para. 1 clause 1 f) GDPR in conjunction with Sec. 7 para. 3 UWG.
3.8. E-Mail contact:
When you contact us (for instance using the contact form or via e-mail), we process your information in order to handle the inquiry, as well as to handle any subsequent questions.
If the data processing is carried out for the purpose of completing pre-contractual measures at your request, or, if you are already our customer, in order to carry out the contract, then the legal basis for this data processing is Art. 6 para. 1 clause 1 b) GDPR.
We only process further personal data if you consent to this (Art. 6 para. 1 clause 1 a) GDPR), or if we have a legitimate interest in processing your data (Art. 6 para. 1 clause 1 f) GDPR). We have a legitimate interest, for instance, in answering your e-mail.
4. Google Analytics
We use Google Analytics, a web analytics service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are saved on your computer and that facilitate an analysis of your use of the website. The information provided by these cookies regarding the visitor’s use of this website is generally transferred to a Google server in the USA and stored there.
We also have a legitimate interest in doing so in accordance with Art. 6 para. 1 clause 1 f) GDPR.
Google has committed to observe the Privacy Shield agreement concluded between the European Union and the USA, and is certified accordingly. By doing so, Google undertakes to comply with the standards and regulations of European data protection law. Further information is available in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
We have activated IP anonymization on this website (anonymizeIp). Based on this function, Google shortens your IP address within a member state of the European Union, or in another contracting state to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA, where it will be shortened. Google will use this information at our request to evaluate your use of the website, in order to create reports regarding website activities, and perform additional services associated with the user's internet usage for us.
The IP addresses transferred by your browser as part of Google Analytics are not associated with other data from Google. You can prohibit the storage of cookies by changing the settings in your browser software accordingly; we would, however, like to inform you that in this case you will not be able to use the full extent of all functions on our website.
You can, additionally, prevent the transmission of the data created by cookies and related to your use of the website (incl. your IP address) by Google and Google’s processing of this data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser plugin, or for browsers on mobile devices, you can click the following link to save an opt-out cookie which will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser, and only for this domain. If you delete the cookies in your browser, you will have to click this link again): [Deactivate Google Analytics]
5. Data protection provisions on the use of social bookmarks
Components of Instagram and Facebook are integrated on the website of KLS Vertriebs GmbH (www.revoltage.rocks). Social bookmarks are web-based bookmarks that users of such services can use to collect links and notifications. These are only integrated on our website as links to the relevant services. After you click the integrated graphic, you will be forwarded to the page of the respective provider, meaning that user information will only be transmitted to the respective provider after you do so. For further information on how your personal data is handled when you use these websites, please see the respective data protection provisions of the providers:
​
Facebook and Instagram
The operating company responsible for Facebook and Instagram is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the data subject lives outside of the US and Canada, the controller responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The data guidelines published by Facebook at https://de-de.facebook.com/about/privacy/ provide information on the collection, processing, and use of personal data by Facebook. Furthermore, they explain which settings Facebook provides to protect the privacy of data subjects. In addition, a variety of applications are available that can be used to suppress data transmission to Facebook. Such applications can be used by data subjects to suppress data transmission to Facebook.
6. Storage term
If not specifically indicated, we save personal data only for as long as is necessary to fulfill the intended purposes.
In some cases, the law requires that personal data be saved, for instance under tax or commercial law. In these cases, we will only save the data for these statutory purposes, and not process it otherwise. We will delete it after the end of the statutory retention period.
7. Your rights as a data subject impacted by data processing
In accordance with applicable laws, you have a variety of rights when it comes to your personal data. If you would like to assert these rights, please send your inquiry via e-mail or regular mail to the address indicated in clause 1, including clear identifying information about yourself.
The following section provides an overview of your rights.
7.1 Right to confirmation and information
You have the right to receive clear information on the processing of your personal data.
In detail:
You have the right to receive confirmation from us at any time of whether your personal data is being processed. If this is the case, you have the right to request free information from us on your saved personal data, along with a copy of this data. Furthermore, you have the right to the following information:
-
the purposes of processing;
-
the categories of personal data that are processed;
-
the recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed, in particular for recipients in third countries or international organizations;
-
if possible, the planned term for which the personal data will be saved or, if this is not possible, the criteria for defining this term;
-
the existence of a right to rectify your personal information, a right to restrict processing by the controller, or a right to object to such processing;
-
the existence of a right to submit complaints to a supervising authority;
-
if the personal data was not collected from you, all available information regarding the origin of the data;
-
the use of automated decision-making, including profiling, in accordance with Art. 22 para. 1 and 4 GDPR and – at least in such cases – clear information on the logic involved and the scope and intended effects of such processing for you.
If personal data is transmitted to a third country or an international organization, you have the right to be informed of the suitable guarantees according to Art. 46 GDPR associated with the transmission.
7.2 Right to rectification
You have the right to request that we rectify and, if necessary, supplement your personal data.
In detail:
You have the right to request that we promptly rectify incorrect personal data on you. In consideration of the purposes of processing, you have the right to request that incomplete personal data be completed, including via a supplementary declaration.
7.3 Right to deletion (»right to be forgotten«)
In some cases, we are obligated to delete your personal data.
In detail:
According to Art. 17 para. 1 GDPR, you have the right to request that we promptly delete your personal data, and we are obligated to promptly delete personal data if one of the following grounds applies:
-
The personal information is no longer required for the purposes for which it was collected or processed in some other manner.
-
You revoke your consent on which the processing was based according to Art. 6 para. 1 clause 1 a) GDPR or Art. 9 para. 2 a) GDPR, and there is no other legal basis for processing.
-
You submit an objection in accordance with Art. 21 para. 1 GDPR against the processing, and there are no overwhelming legitimate reasons for the processing, or you submit an objection to processing according to Art. 21 para. 2 GDPR.
-
The personal data was processed illegally.
-
The deletion of the personal data is required to fulfill a legal obligation under EU law or the law of its member states, to which we are subject.
-
The personal data was collected in relation to information society services offered according to Art. 8 para.1 GDPR.
If the we have disclosed your personal data and if we are obligated to delete such personal data according to Art. 17 para. 1 GDPR, we will take appropriate measures in consideration of available technology and implementation costs to inform the controller responsible for data processing that you as the data subject have requested that all links to said personal data or copies or replications of the personal data be deleted.
7.4 Right to restrict processing
In some cases, you are entitled to request that we restrict the processing of your personal data.
In detail:
You have the right to request that we restrict processing if one of the following requirements applies:
-
you dispute the correctness of the personal data for a period of time that makes it possible for us to review whether the personal data is correct,
-
the processing is unlawful and you reject deletion of the personal data, instead requesting a restriction on the use of the personal data;
-
if we no longer require the personal data for the purpose of processing, but if you need such data to assert, exercise, or defend against legal claims, or
if you have objected to processing according to Art. 21 para. 1 GDPR and it is not yet clear whether our legitimate interest in processing outweighs your own interests.
7.5 Right to data portability
You have the right to receive your personal data, or transmit said data, or have it transmitted by us in a machine-readable format.
In detail:
You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without being prevented from doing so by us, if
-
the processing is based on consent according to Art. 6 para. 1 clause 1 a) GDPR or Art. 9 para. 2 a) GDPR, or on a contract according to Art. 6 para. 1 clause 1 b) GDPR and
-
processing is completed using automated processes.
When exercising your right to data portability according to paragraph 1, you have the right to ensure that we transmit the personal data directly to another controller, if this is technically feasible.
7.6 Right to object
You have the right to object to our legal processing of your personal data if there are circumstances based on your specific situation that justify this, and if our interests in processing do not outweigh these.
In detail:
You have the right to object to the processing of your personal information at any time for reasons related to your specific situation, if such processing is carried out under Art. 6 para. 1 clause 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. We will no longer process your personal data, unless we can show that there are mandatory and protected grounds for processing that outweigh your interests, rights, and freedoms, or if processing serves to assert, exercise, or defend against legal claims.
If we process your personal data for the purpose of direct advertising, you have the right to object against processing of your personal data for the purpose of such advertisements; this also applies to profiling, if it is connected to such direct advertising.
You have the right to object to processing of your personal data for scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR for reasons related to your specific situation, unless the processing is necessary to carry out a task that is in the public interest.
7.7 Automated decision-making, including profiling
You have the right to have decisions made about you not made exclusively through automated processing – including profiling – if this would have a legal impact on you or would affect you significantly in some other manner.
We do not conduct automated decision-making based on the personal data collected.
7.8 Right to revoke a declaration of consent under data protection law
You have the right to revoke your consent to processing of personal data at any time.
7.9 Right to submit complaints to a supervisory authority
You have the right to submit complaints to a supervising authority, in particular in the member state in which you reside, work, or where the significant violation took place, if you believe that your personal data was processed illegally.
8. Data security
We work to protect the security of your data to the greatest possible extent under valid data protection laws and in consideration of our technical capabilities.
We transmit your personal data in encrypted format. This applies to your orders and the customer login. We use the SSL encoding system (secure socket layer), however we would like to note that data transmission online (for instance through e-mail communication) may involve gaps in security. It is not possible to provide seamless protection for data from third party access.
We take technical and organizational security measures in accordance with Art. 32 GDPR to protect your data, and we continuously update these in line with state of the art technology.
Furthermore, we do not guarantee that our services will be available at specific times; it is not possible to exclude faults, interruptions or outages. We regularly and carefully back up the servers we use.
9. Transmission of data to third parties, no data transmission to non-EU countries
In general, we only use your personal data within our company.
If and insofar as we use the services of third parties to fulfill contracts (such as logistics service providers), they will receive personal data only if the transmission is necessary for the service in question.
If we outsource certain portions of data processing (“contract processing”), we contractually obligate contract processors to only use personal data in accordance with the requirements of data protection law, and to ensure that the rights of data subjects are protected.
Data is not transmitted to entities or persons outside of the EU except in the cases indicated in clause 4 of this declaration, nor is any such transmission planned.
10. Data Protection Officer
If you have questions or concerns regarding data protection, please contact our Data Protection Officer:
You can contact our responsible Data Protection Officer at:
KLS Vertriebs GmbH
Dominik Burda
An der Fahrt 13
55124 Mainz
e-mail: datenschutz@kls-vertriebs-gmbh.de