Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor necessary for concluding a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other statement is made for the following processing operations.
"Personal data" is any information relating to an identified or identifiable natural person.
Server log files
You can visit our website without providing any personal information.
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
Processing takes place on the basis of Art. 6(1)(f) GDPR, arising from our predominant legitimate interest in ensuring trouble-free operation of our website and improving our offering.
Contact
Controller
Please feel free to contact us. The controller for data processing is:
Eugen Leven, Kirchdamm 15, 32278 Kirchlengern, Germany, +49 152 21661724, info@sewa-os.com
Customer-initiated contact by email
If you proactively contact us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. This data processing serves to handle and respond to your inquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR, arising from our predominant legitimate interest in processing and responding to your inquiry.
In this case, you have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the cancellation button
If you have concluded a contract via our online presence, we provide you with a cancellation function (cancellation button) via which you can submit your cancellation declaration directly.
When using the cancellation function, we collect your personal data (name, email address, details identifying the contract or part of the contract you wish to cancel, and the time (date and time) the cancellation declaration was sent) only to the extent you provide it. This data processing serves the purpose of providing you with the legally required option to cancel your contract and of properly processing your cancellation.
If the contact concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. Otherwise, the data processing is based on Art. 6(1)(c) GDPR, to fulfil a legal obligation to provide you with a cancellation function on our online presence.
We use your email address only to process your cancellation declaration. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
The processing of your personal data serves the purpose of legally compliant fulfilment of the requirements for the design of the cancellation function and is based on Art. 6(1)(c) GDPR. This data processing is additionally based on Art. 6(1)(f) GDPR, arising from our predominant legitimate interest in being able to provide you with a user-friendly cancellation option.
In this case, you have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
Collection and processing when using the subscription-cancellation button
If you cancel a subscription contract concluded via our online presence via the legally required cancellation button ("Kündigungsbutton"), we process the data you enter in the confirmation screen. When using the cancellation button, we collect your personal data (name, email address, phone number where applicable, details identifying the contract you wish to cancel, and the time (date and time) the cancellation declaration was sent) only to the extent you provide it. This data processing serves the purpose of providing you with the legally required option to cancel your continuing obligation and of properly processing your cancellation.
If the contact concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. Otherwise, the data processing is based on Art. 6(1)(c) GDPR, since we are legally obliged to provide you with a cancellation button on our online presence.
We use your email address only to process your cancellation declaration. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
WhatsApp Business
If you contact us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to handle and respond to your inquiry. For this purpose we collect and process your mobile number registered with WhatsApp, your name if provided, and any other data you provide. We use a mobile device for this service whose address book contains exclusively data of users who have contacted us via WhatsApp. Personal data is therefore not disclosed to WhatsApp without you having already consented to this vis-à-vis WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. is certified under the TADPF and thereby committed to complying with European data protection principles. If the contact serves to carry out pre-contractual measures or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If contact is made for other reasons, this processing is based on Art. 6(1)(f) GDPR, from our predominant legitimate interest in providing quick and simple contact and responding to your inquiry.
In this case you have the right to object at any time, for reasons arising from your particular situation, to this processing based on Art. 6(1)(f) GDPR.
Your personal data is used only to process your inquiry. Your data is subsequently deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on terms of use and data protection when using WhatsApp: whatsapp.com/legal (Terms) and whatsapp.com/legal (Privacy).
Customer account & orders
Customer account
When you open a customer account, we collect your personal data to the extent stated there. This data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent until withdrawal. Your customer account is then deleted.
Collection, processing and disclosure of personal data for orders
When ordering, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your inquiries. Providing the data is required to conclude the contract. Failure to provide it means no contract can be concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, order-processing service providers, and IT service providers. In all cases we strictly comply with statutory requirements. The scope of data transmission is limited to the minimum necessary.
Merchandise management
Use of an external merchandise management system
We use a merchandise management system for contract processing as part of order processing (data processing agreement). For this purpose, your personal data collected as part of the order is transmitted to JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6(1)(b) GDPR.
Payment service provider
Use of the payment service provider Stripe
We use the payment service Stripe on our website, provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The data processing serves the purpose of enabling you to pay via this payment service. When you select and use Stripe, the data required for payment processing is transmitted to Stripe in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
Stripe reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies where applicable. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of payment default for a balanced decision on establishing, carrying out or terminating the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical methods, which include address data among other factors in the calculation. Your legitimate interests are taken into account in accordance with statutory provisions. The data processing serves the purpose of a credit check for initiating a contract. Processing is based on Art. 6(1)(f) GDPR, from our predominant legitimate interest in protection against payment default where Stripe advances payment.
You have the right, for reasons arising from your particular situation, to object at any time to this processing based on Art. 6(1)(f) GDPR by notifying Stripe.
Providing the data is necessary to conclude the contract using your desired payment method. Failure to provide it means the contract cannot be concluded using your chosen payment method.
All Stripe transactions are subject to Stripe's privacy policy, available at stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files stored in or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, and prevent the storage of cookies and transmission of the data they contain. Cookies already stored can be deleted at any time. However, we point out that you may then not be able to use all functions of this website to their full extent.
You can find out how to manage (and disable) cookies in the most common browsers here: Chrome, Microsoft Edge, Mozilla Firefox, Safari.
Technically necessary cookies
Unless otherwise stated below in this Privacy Policy, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after a page change and offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
The use of cookies or comparable technologies is based on § 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR, from our predominant legitimate interest in ensuring optimal functionality of the website and a user-friendly, effective design of our offering.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.
Use of the cookie consent manager CCM19
We use the cookie consent manager CCM19 by HB legal tech GmbH (Kohlgartenstraße 11–13, 04315 Leipzig; "CCM19") on our website as part of a data processing agreement.
The plug-in is hosted at consenttool.haendlerbund.de and enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right of withdrawal for consents already given. The data processing serves the purpose of obtaining and documenting the necessary consents to data processing, thereby complying with legal obligations.
Cookies are used for this purpose. The following information may be collected, stored and, where applicable, transmitted to HB legal tech GmbH: a randomly assigned ID, consent status, date and time of consent/refusal. The data is stored for 1 year and one month and then deleted. This data is not disclosed to any other third parties.
The data processing is carried out to fulfil a legal obligation based on Art. 6(1)(c) GDPR.
Further information on data protection: haendlerbund.de/datenschutzerklaerung.
AI tools
Use of the AI-powered chat system "ChatGPT"
We use the chat system "ChatGPT" by OpenAI Ireland Limited, based at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland ("OpenAI"), on our website. ChatGPT is an automated system based on artificial intelligence. The systems used are based on Large Language Models (LLMs) trained using machine learning methods. How it works, in brief:
- Text inputs are converted into numerical representations ("token vectors"),
- the model calculates the most probable next tokens based on probabilistic methods (transformer architecture, deep learning),
- the response is generated step by step from these probabilities.
This is therefore stochastic text generation, not "human thinking". Content may be inaccurate or incomplete. We do not carry out human review in real time.
In accordance with Art. 52 of the EU AI Act, we point out that you are interacting with an AI system. Responses generated by ChatGPT may contain errors or be incomplete. Please critically review the content and do not rely solely on chatbot output for legally binding matters.
The system serves the purpose of automated communication and simplifying and speeding up the handling of customer inquiries, in particular regarding order status, product features and shipment tracking. We ask that you do not enter any personal, business or confidential data into the chatbot. However, your inputs to OpenAI are not used to train OpenAI's models.
In doing so, your IP address, date and time of the page visit, click path, information about the browser and device you use, pages visited, referrer URL (the website via which you accessed our website), location data, as well as your chat input and the responses generated by the chatbot, are collected and processed. These are stored so that relevant information can be provided afterwards in the event of inquiries or information you request. Your authentication takes place explicitly only with an existing order number and matching postal code.
Cookies are used for this purpose. The cookies enable the internet browser to be recognised again. Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). OpenAI is not certified under the TADPF. Data transmission takes place, among other things, on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, viewable at: EU Commission – Standard Contractual Clauses.
The use of cookies or comparable technologies takes place with your consent based on § 25(1) sentence 1 TTDSG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data takes place with your consent based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent until withdrawal.
Further information on the collection and use of data by OpenAI, your related rights, and options for protecting your privacy can be found in OpenAI's privacy notice at openai.com/policies/privacy-policy.
Use of Google Fonts
We use Google Fonts by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of uniform display of fonts on our website. To load the fonts, a connection to Google's servers is established when the page is accessed. Cookies may be used in this process. Among other things, your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent based on § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data takes place with your consent based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent until withdrawal.
Further information on data processing and data protection: google.de/intl/en/policies and developers.google.com/fonts/faq.
Data subject rights and retention period
Duration of storage
After complete fulfilment of the contract, the data is initially stored for the duration of the warranty period, then, taking into account statutory retention periods, in particular under tax and commercial law, and is deleted after the period expires, unless you have consented to further processing and use.
Rights of the data subject
Provided the statutory requirements are met, you have the following rights under Articles 15 to 20 GDPR: the right to information, rectification, erasure, restriction of processing, and data portability.
You also have a right to object under Art. 21(1) GDPR against processing based on Art. 6(1)(f) GDPR, as well as against processing for the purpose of direct marketing.
Right to lodge a complaint with the supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is unlawful.
You can lodge a complaint, among others, with the supervisory authority responsible for us, which can be reached at:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de
Right to object
If the personal data processing listed here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to this processing with effect for the future.
After you exercise your right to object, processing of the affected data will be discontinued, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.