Privacy and Data Protection Privacy Policy Below, we provide a simple and clear overview of what happens to your personal data when you visit this website. This is followed by detailed information on data protection that complies with the requirements of German data protection law and the European General Data Protection Regulation (GDPR). We take the protection of your personal data very seriously. Your personal data is treated confidentially and in accordance with statutory data protection regulations and this privacy policy. Please note that data transmission over the Internet (e.g., when communicating via email) may inherently have security vulnerabilities; therefore, we cannot guarantee complete protection of data against access by third parties. Controller The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) is: COPYLINE Wolff e.K. Represented by: Jürgen Wolff Ludolfstraße 8 20249 Hamburg Germany Phone: 040 - 524771414 / Email: service@pavoni-werkstatt.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, or similar). General Information Personal Data Personal data is any information relating to an identified or identifiable natural person. In particular, we process personal data such as your name, address, email address, gender, telephone number, encrypted customer account password, date of birth, order details, purchased products, and payment information; data generated during your use of our website; and data we receive from service providers. Data Collection Your data is collected, firstly, when you provide it to us. This may involve, for example, data you enter into a contact form. Additionally, data is automatically collected by our IT systems when you visit this website to ensure the website functions correctly. This primarily consists of technical data (e.g., internet browser, operating system, or time of access). This data is collected automatically as soon as you visit this website. Data is also collected when you create a customer account and place an order with us. You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. You may contact us at any time at info@copyline-kommt.de regarding this matter or for further questions concerning data protection.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Please refer to the section "Right to restriction of processing" in the privacy policy for details. Disclosure of your data The following is a list of instances in which we disclose your collected data, along with the legal basis: data transmission to which you have consented (e.g., to transport and delivery service providers for shipment tracking), Art. 6(1)(a) GDPR; transmission of data to third parties where necessary for the performance of a contract (e.g., to payment, logistics, transport, and delivery service providers for contract execution), Art. 6(1)(b) GDPR; for compliance with legal obligations, Art. 6(1)(c) GDPR; based on our legitimate interests or the legitimate interests of a third party (e.g., data transmission in the context of the assignment of claims), Art. 6(1)(f) GDPR. Storage period We store your data only for as long as is necessary for the specific purpose of data processing or as long as storage is required by law, contract, or tax regulations. We delete data collected during the creation of a customer account if the purpose of storage no longer applies or if you inform us that your customer account is to be deleted. Early deletion of your personal data is not possible if the data is still required for contract execution or to the extent that legal provisions oblige or authorize us to continue storing it. External hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website access data, and other data generated via the website. The host is engaged for the purpose of fulfilling contracts with our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR). Our host will process your data only to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data. To ensure data protection-compliant processing, we have entered into a data processing agreement with our host. Your Rights Revocation of your consent Some data processing operations are only possible with your express consent. You may revoke consent you have already given at any time, with effect for the future. An informal notification sent to us by email is sufficient for this purpose. The lawfulness of data processing carried out prior to the revocation...
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR) WHERE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THIS PRIVACY POLICY FOR THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR). WHERE YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right to lodge a complaint exists without prejudice to any other administrative or judicial remedies. Right to data portability You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible. Information, deletion, and rectification Subject to applicable legal provisions, you have the right at any time to obtain information free of charge regarding your stored personal data, its origin and recipients, and the purpose of the data processing, as well as—where applicable—the right to have this data rectified or deleted. You may contact us at any time at the address provided in the legal notice regarding this matter or for any further questions concerning personal data.
Right to restriction of processing You have the right to request the restriction of the processing of your personal data. You may contact us at any time regarding this matter using the address provided in the legal notice (Impressum). The right to restriction of processing applies in the following cases: If you contest the accuracy of the personal data we hold about you, we generally require time to verify this. For the duration of this verification, you have the right to request the restriction of the processing of your personal data. If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure. If we no longer require your personal data but you need it to establish, exercise, or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure. If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests against ours must be carried out. Until it is determined whose interests prevail, you have the right to request the restriction of the processing of your personal data. If the processing of your personal data has been restricted, such data may—with the exception of storage—only be processed with your consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State. Objection to promotional emails We hereby object to the use of contact details published in compliance with legal notice requirements for the purpose of sending unsolicited advertising and information materials. The site operators expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as spam emails.
SSL or TLS encryption For security reasons and to protect the transmission of confidential content—such as orders or inquiries that you send to us as the site operator—this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Encrypted payment transactions on this website If, following the conclusion of a contract requiring payment, you are obliged to transmit your payment details (e.g., account number for direct debit) to us, this data is required for payment processing. Payment transactions using standard payment methods (Visa/MasterCard, direct debit) are conducted exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser bar. With encrypted communication, the payment details you transmit to us cannot be read by third parties.
Session Cookies We use session cookies on the website to enable specific user actions. We store information regarding these individual user actions for the duration of your visit. The legal basis for this data processing is our legitimate interest—pursuant to Art. 6(1)(f) GDPR—in providing optimized services to the user. The data (log data, data regarding individual user actions) is automatically transmitted by your browser. Without the provision of this data, it is not possible to use the website without errors. Cookies for Managing the Cookie Banner We use cookies on the website to manage the cookie banner. This ensures that the cookie banner is not displayed to you again upon a repeat visit to the website. The legal basis for this data processing is our legitimate interest—pursuant to Art. 6(1)(f) GDPR—in the reliable display of the cookie banner. The data (log data, data regarding the display of the cookie banner) is transmitted by your browser for technical reasons. Without the provision of this data, the website cannot be used without errors.
Session Cookies We use session cookies on the website to enable specific user actions. We store information regarding these individual user actions for the duration of your visit. The legal basis for this data processing is our legitimate interest—pursuant to Art. 6(1)(f) GDPR—in providing optimized services to the user. The data (log data, data regarding individual user actions) is transmitted automatically by your browser. Error-free use of the website is not possible without the provision of this data. Social Media Facebook A Facebook button is integrated into our website. However, you are only redirected to Facebook if you click the Facebook button. Before you click it, no data is transmitted to Facebook, and no Facebook cookies are placed on your device. Clicking the Facebook button redirects you to Facebook. By clicking, you consent to us allowing Facebook to collect personal data for its own purposes. Facebook receives all information that your browser transmits for technical reasons and places its own cookies on your device. This occurs regardless of whether you have a Facebook user account. If you are logged into your Facebook user account at the time you click the Facebook button, Facebook automatically associates your data with your account. To prevent this, you must log out of your Facebook user account before clicking the Facebook button. Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) processes your data as an independent controller. We have no knowledge of further details regarding data processing by Facebook or the extent to which data processing takes place in the USA. You can find more information about data processing by Facebook in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/update.
Contact Form If you send us inquiries via the contact form, the information provided in the inquiry form (name, content of the inquiry, timestamp)—including the contact details you entered—will be stored by us for the purpose of processing the inquiry and handling any follow-up questions. We do not share this data without your consent. This data is processed based on Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), provided such consent was requested. The data you enter in the contact form remains with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been fully processed). Statutory retention periods under commercial and tax law remain unaffected.
Callback Service If you submit a request for a callback via our callback service, the information provided in the callback form—including your contact details—will be stored by us to facilitate the callback and to handle any follow-up questions. We do not share this data with third parties without your consent. Data processing is based on Art. 6(1)(b) GDPR if your request relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where such consent has been requested. The data you provide will be retained until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after the callback has taken place and your request has been fully processed). Statutory retention periods under commercial and tax law remain unaffected.
Inquiries via email, telephone, or fax If you contact us via email, telephone, or fax, your inquiry—including all associated personal data (name, contact details, content of the inquiry)—will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in effectively handling inquiries addressed to us. The data you send us via contact inquiries remains with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Statutory retention periods under commercial and tax law remain unaffected. Registration on this website You can register on this website to use additional features. We use the data entered for this purpose solely to provide the specific service or offering for which you have registered. All mandatory information requested during registration must be provided in full; otherwise, we will reject the registration. We use the email address provided during registration to inform you of important changes, such as changes to the scope of services or technically necessary modifications. The data entered during registration is processed for the purpose of managing the user relationship established by the registration and, where applicable, for initiating further contracts (Art. 6(1)(b) GDPR). The data collected during registration is stored by us for as long as you are registered on this website and is subsequently deleted. Statutory retention periods remain unaffected.
Ordering Process and Contract Execution When you place an order in our online shop, we process your personal data for the purpose of executing the contract and processing payments. This also includes any consultation we provide and the promotion of new products. The data processed includes your name, email address, and postal address, as well as company details and payment information. Customer data is processed based on Article 6(1)(b) of the GDPR (processing for the performance of a contract or to take steps prior to entering into a contract) and Article 6(1)(c) of the GDPR (legal obligations). Advertising for new products is conducted based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in promoting our products. Due to commercial and tax law requirements, we are obliged to retain your address, payment, and order data for a period of ten calendar years following the end of the contract. Data not relevant to the contract or accounting records will be deleted once the order is completed or the business relationship has ended. Providing customer and payment details is necessary for contract execution and payment processing. You cannot place an order without providing this information.
E-commerce and Payment Providers Order Process and Contract Execution When you place an order in our online shop, we process your personal data for the purpose of fulfilling the contract and processing payments. This also includes any consultation we provide and the promotion of new products. The data processed includes your name, email address, and postal address, as well as company details and payment information. Customer data is processed based on Art. 6(1)(b) GDPR (processing for the performance of a contract or pre-contractual measures) and Art. 6(1)(c) GDPR (legal obligations). Advertising for new products is conducted based on Art. 6(1)(f) GDPR, as we have a legitimate interest in marketing. Due to commercial and tax law requirements, we are obliged to retain your address, payment, and order data for a period of ten calendar years following the end of the contract. Data not relevant to the contract or accounting records will be deleted once the order is completed or the business relationship has ended. Providing customer and payment details is necessary for contract execution and payment processing; you cannot place an order without providing this information. Data Transmission During Contract Execution We only transmit personal data to third parties if necessary for contract execution—for example, to companies entrusted with delivering the goods or to the payment service provider commissioned to handle payments. The legal basis for this data processing is Art. 6(1)(b) GDPR (processing for the performance of a contract). Data is also stored for internal company billing and accounting purposes. Any further transmission of data occurs only if you have expressly consented to such transmission. If you wish to use the delivery company’s shipment tracking service to receive delivery notifications or coordinate the delivery, we will transmit your email address to the company commissioned with the delivery. The legal basis for this is the consent you provided during the ordering process, in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future. Such revocation does not affect the lawfulness of processing carried out prior to the revocation. Your data will not be passed on to third parties without your express consent—for example, for advertising purposes.
PayPal For payment processing, we offer payment via PayPal (Plus) on this website. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). If you select PayPal (Plus) as your payment method, the payment data you enter will be transmitted to PayPal as part of the payment processing. Your data is transmitted to PayPal based on the legal grounds of Art. 6(1)(b) GDPR (processing for the performance of a contract) and only to the extent necessary for payment processing. The use of certain PayPal Plus payment methods (direct debit, credit card, purchase on invoice, and installment payment) requires a successful identity and credit check. For this purpose, PayPal transmits your data to external credit reference agencies. We therefore forward your data to PayPal for the purpose of identity and credit checks during the initiation and execution of the contract.
Other third parties, Art. 6(1)(c) and (f) GDPR Data is only disclosed to other third parties or government agencies in compliance with applicable data protection laws—specifically in the event of an official or court order, where we are legally obliged or entitled to do so, for the purpose of prosecuting criminal offenses, or for the exercise and enforcement of our rights. Links to other websites If you find links on our website that lead to the websites of other companies, we are not responsible for the data protection compliance of the external websites accessed via these links. Please consult the respective website for information regarding their data protection measures. 1. Google Analytics We use Google Analytics to analyze website usage. The data obtained is used to optimize our website and our advertising activities. Google Analytics is provided to us by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes website usage data on our behalf and is contractually committed to measures ensuring the security and confidentiality of the processed data. During your visit to the website, the following data (among others) is recorded:
During your visit to the website, the following data (among others) is recorded: Pages visited Orders, including revenue and the products ordered Achievement of "website goals" (e.g., contact inquiries and newsletter sign-ups) Your behavior on the pages (e.g., time spent, clicks, scrolling behavior) Your approximate location (country and city) Your IP address (in truncated form, so that unique identification is not possible) Technical information such as browser, internet service provider, device, and screen resolution The source of your visit (i.e., the website or advertising medium through which you arrived at our site)
No personal data—such as names, addresses, or contact details—is ever transmitted to Google Analytics. Such data is transmitted to Google servers located in the USA. Please note that the level of data protection guaranteed in the USA is not equivalent to that within the EU. Google Analytics stores cookies in your web browser for a period of two years following your last visit. These cookies contain a randomly generated user ID that allows you to be recognized during future visits to the website. The recorded data is stored alongside this randomly generated user ID, enabling the analysis of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data is retained indefinitely in aggregated form. If you do not consent to this data collection, you can prevent it by installing the Google Analytics opt-out browser add-on or by declining cookies via our cookie settings dialog. Changes to the Privacy Policy We reserve the right to modify this privacy policy at any time, particularly to ensure compliance with legal requirements or to reflect an expanded range of services.