Privacy policy for the website and online shop of Nicola Metzger GmbH. Data protection is of great importance to Nicola Metzger and we want to be open and transparent when processing your personal data.

The information in this declaration applies to the processing of personal data on or via our website and our online shop and is intended to inform you in particular about the scope of the processing, the processing purposes, recipients, legal bases, storage periods and your rights.

Personal data is any information relating to an identified or identifiable natural person, i.e. a human being (hereinafter also referred to as "data subject"), including, for example, your name, address or e-mail address. Processing" of personal data means in particular the collection, storage, use and transmission of such data.

• Name and address of the data controller

The responsible party within the meaning of the General Data Protection Regulation (DSGVO) and other national data protection laws of the member states as well as other data protection regulations is the

Nicola Metzger GmbH

Kastanienallee 76

10435 Berlin

Germany

Phone: +49 (0) 30 956 23155

E-mail: customerservice@nicolametzger.com

• General information on data processing

• Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 (1) c DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of us or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) f DSGVO serves as the legal basis for the processing.

• Data deletion and storage period

The personal data of the data subject will be deleted or the processing restricted as soon as the purpose of the storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject.

• Data processing during the provision of the website and log files

• Description and scope of data processing

Each time our website is called up, our system automatically collects data and information from the computer system of the calling device (computer, smartphone, tablet, etc.).

The following data is collected in this context:

- Information about the browser type and the version used

- the operating system

- the internet service provider

- the IP address of the device

- date and time of access

- the page from which the file was requested

- names of the downloaded files

- amount of data transferred

- Status codes of the access (Http status codes)

This data is also stored in the log files of our system. A storage of these data together with other personal data of the user does not take place.

• Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) lit. f DSGVO.

• Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website and the corresponding content to the user's device. For this purpose, the IP address of the user must remain stored for the duration of the session.

In addition, the data in the log files serve us to optimize the website and to ensure the security of our information technology systems.

These purposes are also our legitimate interest in data processing.

• Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

• Contact form, e-mail contact and telephone contact

• Description and scope of data processing

Among other things, you can contact us via the e-mail address(es) provided on our website and the contact form. In this case, the personal data transmitted by e-mail or via the contact form will be stored and processed.

In addition, you can contact us via the telephone numbers provided. If you contact us by telephone, we usually collect the data that you provide us with or that is automatically transmitted with your call as part of the call notes. This includes your name, your request and your phone number.

• Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending a message by e-mail or contact form is Art. 6 (1) lit. f DSGVO. If the message is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

• Purpose of the data processing

The processing of personal data serves us to process the contact. This is also the necessary legitimate interest in processing the data.

• Duration of the storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent by e-mail or contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

If, in the course of the communication, data is generated that we are obliged to retain or store, for example, due to tax, budgetary or other regulations, it will only be deleted after the expiry of the respective statutory retention or storage periods. The legal basis for this storage is Art. 6 para. 1 lit. c DSGVO.

• Orders in our online shop

• Description and scope of data processing

When you order goods in our online shop, we process the data that you transmit to us in the context of the respective order. These can be seen from the form fields requested and include, in particular, name, delivery and billing address, payment data, if applicable, and which product(s) was/are purchased and at what price.

• Legal basis for the data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. b and f DSGVO.

• Purpose of data processing and duration of storage

We use the data of the respective order in order to execute and invoice it. In these purposes also lies our legitimate interest in the processing of the data according to Art. 6 para. 1 lit. f DSGVO.

After execution, billing and payment of an order, we still store the data as long as we are obliged to do so due to tax, commercial or other regulations. Only then will the data be deleted. The legal basis for this storage is Art. 6 para. 1 lit. c DSGVO.

• Customer account

• Description and scope of data processing

When you open a customer account on our website, we collect the data that can be seen from the requested form fields, including:

(1) Name

(2) e-mail address

(3) Password

We also store your order history, i.e. the details of the orders you have placed via the customer account and the shipping and billing addresses you have entered.

• Legal basis for data processing

The legal basis for the processing of the data is Art. 6 Para. 1 lit. b and f DSGVO.

• Purpose of the data processing

We use the data to provide you with your customer account, including the order history. These purposes are also our legitimate interest in processing the data according to Art. 6 para. 1 lit. f DSGVO.

• Duration of storage

We store the data until you delete your customer account with us. If you wish a deletion, simply send an e-mail to customerservice@nicolametzger.com . After deletion, the customer account and the order history are no longer accessible.

We will delete a customer account if it has been inactive for more than five years, i.e. no orders have been placed via the customer account over this period and the customer has not logged in during this time.

• Newsletter

• Description, scope and purpose of data processing

If you subscribe to our newsletter, we use the data you provide for this purpose to send you our e-mail newsletter on a regular basis.

• Legal basis of data processing and duration of storage

The legal basis for the processing of the data for the newsletter dispatch is your consent (Art. 6 para. 1 p. 1 lit. a DSGVO).

Unsubscribing from the newsletter, is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the list of recipients, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

• Categories of recipients of personal data

When you order goods in our online shop, we pass on the data required for delivery to the delivery company commissioned with the shipment. For payment processing, the data required for this purpose is passed on to the respective payment companies.

For the provision of our website and the contact options offered, the online shop and the customer accounts as well as our newsletter, we use various service providers, including host providers, email providers, who process the data stored by them exclusively on our behalf as processors in accordance with Article 28 DSGVO.

• Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the controller (if applicable, subject to the existence of further prerequisites regulated in the relevant provisions):

• The right to information according to Art. 15 DSGVO
• The right to rectification according to Art. 16 DSVGO
• The right to erasure ("right to be forgotten") according to Art. 17 DSGVO
• The right to restriction of processing according to Art. 18 DSGVO
• The right to information according to Art. 19 DSGVO
• The right to data portability according to Art. 20 DSGVO
• The right not to be subject to automated decision-making under Art. 22 GDPR
• The right to withdraw consent to the processing of personal data under Art. 7(3) DSGVO

To assert these rights, please contact us using the contact details provided.

Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

• Right to object

Insofar as we process personal data as explained above in order to protect our legitimate interests which prevail in the context of a balance of interests, you may object to this processing with effect for the future, but only if there are grounds arising from your particular situation. If the processing is carried out for direct marketing purposes, you can exercise this right at any time, even without grounds.

After you have legitimately exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims. This restriction does not apply if the processing is carried out for direct marketing purposes.

Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").



Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use the User ID function. The User ID allows us to assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and to analyse user behaviour across devices.

We use Google Signals. This allows Google Analytics to collect additional information about users who have enabled personalised ads (interests and demographics) and to deliver ads to these users in cross-device remarketing campaigns.

We use the 'anonymizeIP' function (so-called IP masking): Due to the activation of IP anonymisation on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, the following data is recorded, among other things:

The pages you visit, your "click path".
Achievement of "website goals" (conversions, e.g. newsletter registrations, downloads, purchases)
Your user behaviour (e.g. clicks, dwell time, bounce rates)
Your approximate location (region)
Your IP address (in shortened form)
Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
Your internet service provider
the referrer URL (via which website/ via which advertising medium you came to this website)


Purposes of the processing

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.



Recipient

The recipient of the data is

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
as a processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google.



Transmission to third countries

A transfer of data to the USA cannot be ruled out.



Storage period

The data sent by us and linked to cookies are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

You can also prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by

a. not giving your consent to the setting of the cookie or

b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

You can also prevent cookies from being stored by configuring your browser software accordingly. However, if you configure your browser to refuse all cookies, this may limit the functionality of this and other websites.



Legal basis and possibility of revocation

for this data processing is your consent, Art.6 Abs.1 S.1 lit.a DSGVO. You can revoke your consent at any time with effect for the future. In this case, please send us an email to

customerservice@nicolametzger.com .

For more information on Google Analytics' terms of use and Google's data protection, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.