Data protection

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are under no obligation to provide the data. Failure to provide it will have no consequences. This only applies if no other information is provided during subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without providing any personal information.

Each time you access our website, usage data is transmitted to us or our web hoster/IT service provider via your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of the access, the IP address, the amount of data transferred and the requesting provider. The processing is based on Art. 6 (1) lit. GDPR from our overriding legitimate interest to ensure the smooth operation of our website and to improve our services.

Contact
Responsible / data protection officer

The person responsible in accordance with Article 4 (7) of the European General Data Protection Regulation (GDPR) is Bonita s.r.o., Hledikova 190, Osnice 25242, Czech Republic. You can reach us at any time by post or email at info@fattroll.com.

Initiative contact by the customer by email

If you contact us by e-mail, we collect your personal data (name, e-mail address, message text) only to the extent that you have provided us. The data processing serves to process and answer your contact request.

If the contact serves to carry out pre-contractual measures (e.g. advice on interest in purchase, preparation of an offer) or if it concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. (b) GDPR.

If the contact is made for other reasons, the data processing is based on Art. 6 (1) lit. (f) GDPR from our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object to the processing of your personal data on the basis of Art. 6 (1) (f) GDPR at any time for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use. 

Customer account & orders

Customer account

When you open a customer account, we collect your personal data to the extent specified therein. The purpose of the data processing is to improve your shopping experience and to simplify the order processing. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

Collection, processing and transfer of personal data for orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to deal with your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. The processing is based on Art. 6 para. 1 lit.

A transfer of your data takes place, for example, to the shipping companies and courier providers selected by you, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly adhere to the legal requirements. The scope of the data transfer is limited to a minimum.

Advertising

Use of the e-mail address for sending newsletters

We use your e-mail address, regardless of the order processing, exclusively for our own advertising purposes for sending the newsletter, provided that you have expressly consented. The processing is carried out on the basis of Art. 6 (1) lit. (a) GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time via the corresponding link in the newsletter or by notifying us. Your e-mail address will then be deleted from the distribution list.

Shipping service provider

Passing on the e-mail address to shipping companies for information about the shipping status

We pass on your e-mail address to the transport company as part of the contract processing, provided that you have expressly consented to this in the ordering process. The purpose of the transfer is to inform you by e-mail about the shipping status. The processing is carried out on the basis of Art. 6 (1) lit. (a) GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

Payment service provider credit report

Use of Stripe

All Stripe transactions are subject to the Stripe privacy policy. You can find this at https://www.Stripe.com/de/webapps/mpp/ua/privacy-full

Use of Stripe Payments

We use the Stripe payment service from Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland "Stripe") on our website. The data processing serves the purpose of being able to offer you payment via the Stripe payment service. For the integration of this payment service, it is necessary that Stripe collects, stores and evaluates data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.

The use of cookies or similar technologies takes place on the basis of § 15 para. 3 sentence 1 Telemedia Act. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f) DSGVO from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

By selecting and using Stripe, the data required for payment processing is transmitted to Stripe in order to be able to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. For more information on data processing when using the Stripe payment service, please see the associated privacy policy: https://stripe.com/en-de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By making the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then no longer be able to use all the functions of this website to their full extent.

The following links will tell you how to manage cookies in the main browsers (including how to deactivate them):

Chrome: https://support.google.com/accounts/answer/61416?hl=en

Internet Explorer: https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Mozilla Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox

Safari: https://support.apple.com/en-us/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies to make our service more user-friendly, effective and secure. In addition, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this purpose, it is necessary that the browser is recognized even after a page change.

The processing of your personal data takes place on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Analysis of advertising tracking

Use of Google Analytics

We use the web analytics service Google Analytics from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is thus the company affiliated with Google that is responsible for processing your data and ensuring compliance with applicable data protection laws.

The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. On behalf of the operator of this website, Google will use the information obtained to evaluate your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Among other things, the following information may be collected: IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (website from which you arrived at our website), location data, purchase activity.

Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels to help analyze how you use the website. The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. An adequacy decision of the EU Commission for the USA is not available. The transfer of data takes place on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at https://policies.google.com/privacy/frameworks. Both Google and US authorities have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.

IP anonymization is enabled on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 15 (3) sentence 1 TMG in conjunction with Article 6 (1) a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

You can find more information on terms of use and data protection at https://policies.google.com/terms?hl=en or at https://policies.google.com/technologies/cookies?hl=en.

Use of Google Ads conversion tracking

We use the online advertising program "Google Ads" on our website and in this context conversion tracking (evaluation of visits). Google Conversion Tracking is an analysis service of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and ensuring compliance with applicable data protection laws.

When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. This means that there is no way to track the cookies across Ads customers' websites.

The information obtained using the conversion cookie is used to create conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

Your data may be transferred to the US. There is no EU Commission adequacy decision for the USA. The transfer of data takes place on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at https://policies.google.com/privacy/frameworks.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 15 (3) sentence 1 TMG in conjunction with Article 6 (1) a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

You can find further information and Google's privacy policy at: https://policies.google.com/privacy?gl=en

Plug-ins and miscellaneous

Using the Google Tag Manager

We use the Google Tag Manager of Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is thus the company affiliated with Google that is responsible for processing your data and for compliance with applicable data protection laws.

This application manages JavaScript tags and HTML tags used in particular to implement tracking and analysis tools. The data processing serves the purpose of designing and optimizing our website according to your needs.

The Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of additional tags that can collect and process personal data.

Rights concerned and storage period

Duration of storage

After complete execution of the contract, the data will be stored initially for the duration of the warranty period, then taking into account statutory, in particular tax and commercial law retention periods and deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, according to Art. 21 Paragraph 1 GDPR, you have the right to object to processing based on Art. 6 Paragraph 1 f GDPR, as well as against processing for the purpose of direct mail.

Right of appeal to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you are of the opinion that your personal data is not being processed lawfully.

Right to object

If the processing of personal data listed here is based on our legitimate interest pursuant to Article 6 (1) (f) GDPR, you have the right to object to such processing at any time with effect for the future on grounds relating to your particular situation.

After the objection, the processing of the data concerned will be stopped, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

last update: 23/06/2021