Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary to conclude a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other indication is given for the subsequent processing operations.
"Personal data" means all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any information about yourself.
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page visited, the date and time of access, the IP address, the amount of data transmitted, and the requesting provider.
Processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our offer.

If applicable, your data is transmitted to and processed in third countries outside the EU, in particular to Canada and the USA. An adequacy decision by the EU Commission exists for Canada. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to those of the EU Commission's Standard Contractual Clauses.

Contact

Controller

Contact us if you wish. The controller for data processing is: Dr.-Ing. Hans Mosel GmbH, Bahndamm 37, 33758 Schloß Holte-Stukenbrock Germany, +49 (0) 5207 - 991 226 0, shop@moselgmbh.de

Customer's unsolicited contact by email

If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. Data processing serves the purpose of processing and responding to your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and processing when using the contact form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. Data processing serves the purpose of making contact.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and processing when using the cancellation button

If you have concluded a contract via our online presence, we provide you with a cancellation function (cancellation button), through which you can submit your cancellation statement directly.
When using the cancellation function, we collect your personal data (name, email address, information identifying the contract or part of the contract you wish to cancel, as well as the time (date and time) of submission of the cancellation statement) only to the extent you provide it. Data processing serves the purpose of providing you with the legally required option to cancel your contract and properly processing your cancellation.
If the contact concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. Otherwise, data processing is based on Art. 6(1)(c) GDPR to fulfill a legal obligation to provide you with a cancellation function on our online presence.
We only use your email address to process your cancellation statement. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

The processing of your personal data serves the purpose of legally fulfilling the statutory requirements for the design of the cancellation function and is based on Art. 6(1)(c) GDPR. This data processing is also based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in being able to provide you with a user-friendly cancellation option. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.

Orders

Collection, processing and disclosure of personal data for orders

When ordering, we collect and process your personal data only to the extent necessary to fulfill and process your order and to process your requests. The provision of the data is necessary to conclude the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the fulfillment of a contract with you.
Your data is therefore disclosed, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transmission is limited to a minimum.

If applicable, your data is transmitted to and processed in third countries outside the EU, in particular to Canada and the USA. An adequacy decision by the EU Commission exists for Canada. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to those of the EU Commission's Standard Contractual Clauses.

Advertising

Use of the email address for sending newsletters

We use your email address to send information and offers via newsletter, provided you have expressly agreed to it. Data processing serves exclusively the purpose of advertising communication. For this purpose, we process your email address and, if applicable, other data that you have voluntarily provided as part of signing up for our newsletter.
Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on consent up to the time of revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR on the basis of our and your legitimate interest in preventing the reuse of your email address for sending our newsletter. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.

Inventory Management

Use of an external inventory management system

We use an inventory management system for contract processing within the framework of order processing. For this purpose, your personal data collected during the order is transmitted to
Billbee GmbH, Arolser Str. 10, 34477 Twistetal.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6(1)(b) GDPR.

Payment Service Provider

Use of PayPal

We use the PayPal payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Notice. You can find it
at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the PayPal Plus payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

For individual payment methods such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right, if applicable, to obtain a credit report based on mathematical-statistical methods using credit reporting agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reporting agency and uses the received information about the statistical probability of a payment default to make a balanced decision about the establishment, performance, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data is used, among other things, in their calculation. Your protectable interests are taken into account in accordance with statutory provisions. Data processing serves the purpose of a credit check for initiating a contract. Processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protection against payment default when PayPal provides the advance payment. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary to conclude the contract using your desired payment method. Failure to provide it will result in the contract not being concluded using your selected payment method.

Use of PayPal Express

We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.
The processing of your personal data is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
More detailed information about data processing when using the PayPal Express payment service can be found in the corresponding privacy notice at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Check-Out

We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

Cookies may be stored here, enabling the recognition of your browser. The data processing taking place thereby is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right, if applicable, to obtain a credit report based on mathematical-statistical methods using credit reporting agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reporting agency and uses the received information about the statistical probability of a payment default to make a balanced decision about the establishment, performance, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data is used, among other things, in their calculation. Your protectable interests are taken into account in accordance with statutory provisions. Data processing serves the purpose of a credit check for initiating a contract. Processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protection against payment default when PayPal provides the advance payment.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary to conclude the contract using your desired payment method. Failure to provide it will result in the contract not being concluded using your selected payment method.

Third-party providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6(1)(b) GDPR. Local third-party providers may include, for example:

• Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
• Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Invoice payment via PayPal

If you pay using the invoice payment method, the data required to process the payment is first transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. If necessary, Ratepay may conduct a credit check based on mathematical-statistical methods (probability or score values) using credit reference agencies, following the process described above. The processing of data is for the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment default when Ratepay provides the payment in advance.
Further information on data protection and which credit reference agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the relevant privacy notice at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Shopify Payments

We use the "Shopify Payments" payment service provided by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, the payment is processed by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The processing of data is for the purpose of being able to offer you payment via the Shopify Payments payment service. By selecting and using a corresponding "Shopify Payments" payment method, the data required to process the payment is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Stripe reserves the right, if necessary, to obtain a credit check based on mathematical-statistical methods using credit reference agencies. To this end, Stripe transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision about establishing, performing or terminating the contractual relationship. The credit check may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods, and address data is among other things included in their calculation. Your legitimate interests are taken into account in accordance with the legal provisions. The processing of data is for the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment default when Stripe provides the payment in advance.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you by notifying Stripe. The provision of data is required to conclude the contract using your preferred payment method. Failure to provide the data will result in the contract not being concluded using your selected payment method.
Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy notice at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing when payment is processed by the payment service provider Stripe can be found in Stripe's privacy notice at: https://stripe.com/de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the user's web browser or by the web browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the unique identification of the browser when the website is visited again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data contained in them. Previously stored cookies can be deleted at any time. However, we point out that you may not be able to use all the functions of this website to their full extent.

At the links below, you can find out how you can manage cookies in the most important browsers (including disabling them):
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-löschen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated in the privacy notice below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you change pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after you change pages.

The use of cookies or similar technologies is carried out on the basis of Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.

Use of the Shopify Consent Tool (Shopify Privacy & Compliance)

We use the “Shopify Privacy & Compliance” consent tool provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to give consent to data processing via the website, in particular the setting of cookies, as well as to exercise your right of withdrawal for consents already given. The processing of data is for the purpose of obtaining and documenting the necessary consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify. Your data may be transmitted to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is carried out on the basis of contractual obligations comparable to those of the European Commission's Standard Contractual Clauses.
The processing of data is carried out to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz.

Data Subject Rights and Retention Period

Retention Period

After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, and then, taking into account statutory, in particular tax and commercial retention periods, and deleted after the expiry of the period, unless you have agreed to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right to information, rectification, erasure, restriction of processing, and data portability.
In addition, under Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purpose of direct marketing.

Right to Complain to the Supervisory Authority

Under Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can file a complaint, among others, with the supervisory authority responsible for us, which you can contact at the following contact details:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de

Right to Object

If the personal data processing listed here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object to these processing activities at any time with effect for the future.
Once an objection has been raised, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.