Privacy Notice

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens with your personal data when you visit this website. Personal data are all data that can be used to personally identify you. For detailed information on data protection, please refer to our full privacy notice below.

Data Collection on this Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. The contact details can be found in the section “Note on the controller” in this privacy notice.

How do we collect your data?

Your data are collected in part because you provide them to us. This might involve data you enter into a contact form, for example.

Other data are collected automatically or after your consent when you visit the website via our IT systems. These are mainly technical data (for example, browser, operating system or time of page access). The collection of this data takes place as soon as you enter this website.

What do we use your data for?

A part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to request free information about the origin, recipient and purpose of your stored personal data. You also have the right to request correction or deletion of these data. If you have given your consent to data processing, you may withdraw this consent at any time for the future. Furthermore you have the right to request restriction of processing of your personal data under certain circumstances. Additionally you have the right to lodge a complaint with the competent supervisory authority.

For this and for further questions on the subject of personal data you can contact us at any time.

Analysis Tools and Third-Party Tools

When you visit this website, your surfing behaviour may be statistically evaluated. This occurs mainly with so-called analysis programmes.

Detailed information on the analysis programmes used can be found in the following privacy notice.

2. Hosting

We host the content of our website at the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website are stored on the servers of the hosting provider(s). These may include IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website accesses and other data generated on a website.

The external hosting is carried out for the purpose of fulfilling a contract with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR). If corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, as far as the consent includes the storage of cookies or access to information on the user’s device (e.g., device-fingerprinting). The consent may be withdrawn at any time.

Our hosting provider will process your data only to the extent required to fulfill its performance obligations and will follow our instructions in relation to these data.

We use the following hosting provider:

enerspace GmbH
Borsigstraße 24
32312 Lübbecke
Germany
Website: https://www.enerspace.de

Processing Contract

We have concluded a contract for commissioned data-processing with the above-named provider. This contract ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

We have concluded a contract for commissioned data-processing with the above named provider. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy notice.

When you use this website, various personal data are collected. Personal data are data by which you can be personally identified. This privacy notice explains what data we collect and why we use it. It also explains how and to what purpose this is done.

We would like to point out that data transmission over the Internet (for example, when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the Controller

The controller for the data processing on this website is:

Ömer Ayranci
Avanta Textilproduktion & Handel GmbH
Ringbahnstr. 13
12099 Berlin
Germany

Telephone: 030 2000 71 80
E-Mail: info@stickerei-avanta.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses etc.).

Storage Period

Unless a more specific storage period has been stated in this privacy notice, your personal data will remain with us until the purpose for which the data were processed no longer applies. If you assert a right to deletion, or withdraw your consent to storage, the data will be deleted unless there are legally permissible grounds for storage (e.g. statutory retention obligations); in such case the data will be deleted once those grounds no longer apply.

General Information on the Legal Basis of Data Processing on this Website

If you have given your consent to the processing of your personal data, the processing takes place on the basis of Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR if special categories of data are processed. In the case of explicit consent to transfer personal data to third countries the processing is also based on Art. 49 (1) lit. a GDPR. If your data are required for the performance of a contract or the implementation of pre-contractual measures, the processing is based on Art. 6 (1) lit. b GDPR. Furthermore, processing may be based on our legitimate interest in accordance with Art. 6 (1) lit. f GDPR or on a legal obligation under Art. 6 (1) lit. c GDPR. The specific legal basis applicable in each case is explained in the following paragraphs of this privacy notice.

Recipients of Personal Data

In the course of our business we work with external parties. In some cases this requires transfer of personal data to these external parties. We only pass on personal data if it is necessary for fulfilment of a contract (Art. 6 (1) lit. b GDPR), if we are legally obliged to do so (e.g. data disclosure to tax authorities), if we have a legitimate interest (Art. 6 (1) lit. f GDPR) or if another legal basis allows the transfer. When we use commissioned data-processors we only pass on personal data of our customers on the basis of a valid contract on commissioned data-processing. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of Your Consent to Data Processing

Many processing operations are only possible with your explicit consent. You may withdraw any consent you have given at any time. The lawfulness of the processing carried out until withdrawal remains unaffected.

Right to Object in Specific Cases and to Direct Marketing (Art. 21 GDPR)

If the processing of your personal data is based on Art. 6 (1) lit. e or f GDPR you have the right to object at any time for reasons arising from your particular situation to the processing of your personal data; this also applies to profiling based on those provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21 (1) GDPR).

If your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be processed for the purposes of such marketing (objection under Art. 21 (2) GDPR).

Complaint to the Supervisory Authority

In the event of breaches of the GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Right to Data Portability

You have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance, provided the processing is based on consent (Art. 6 (1) lit. a GDPR) or on a contract (Art. 6 (1) lit. b GDPR) and the processing is carried out by automated means.

Right to Rectification and Deletion

You have the right, under certain circumstances, to request the correction of inaccurate personal data concerning you, or to have incomplete personal data completed. You also have the right to have personal data concerning you deleted where one of the following grounds applies: …

Right to Restriction of Processing

You have the right to request restriction of processing of your personal data in the following cases: …

SSL / TLS Encryption

This site uses SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption for security reasons and to protect the transmission of confidential content, such as query requests you send to the operator of the site. You can recognise an encrypted connection by the change from “http://” to “https://” in the address bar and the padlock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on this Website

If, after the conclusion of a paid contract, you are obliged to transmit your payment data (such as your account number for direct debit), these data are required for payment processing.

The payment transaction via the common payment methods (Visa/MasterCard, direct debit) is carried out exclusively over a secure SSL or TLS connection. You can recognise an encrypted connection as described above.

If the communication is encrypted, your payment data cannot be read by third parties.

Unsolicited E-Mail Advertising – Right to Object

The use of contact data published under the imprint obligation for the purpose of sending unsolicited advertising and information materials is hereby expressly prohibited. The operators of the site expressly reserve the right to take legal action in case of unsolicited sending of advertising information, such as spam e-mails.

4. Data Collection on this Website

Cookies

Our websites use so-called “cookies”. Cookies are small files that are stored on your device. They do not harm your device. They are either session cookies (deleted after your visit) or persistent cookies (remain until you delete them or your browser deletes them).

Cookies may originate from us (first-party cookies) or from third parties (third-party cookies). Third-party cookies enable certain services from third parties (such as payment services) to be integrated within web pages.

Cookies have different functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. shopping cart functionality or the display of videos). Other cookies may be used to evaluate user behaviour or for advertising purposes.

Cookies necessary for the electronic communication process, for providing certain user-desired functions (e.g. shopping cart functionality) or for optimisation of the website (e.g. cookies for audience measurement) are stored on the basis of Art. 6 (1) lit. f GDPR if no other legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for a technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG); the consent may be withdrawn at any time.

You can configure your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, accept cookies for certain cases or exclude cookies generally, and activate automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Which cookies and services are used on this website can be found in this privacy notice.

Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of these data is based on Art. 6 (1) lit. b GDPR if your enquiry is related to the performance of a contract or is required prior to entering into a contract. In all other cases the processing is based on our legitimate interest (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if this has been obtained; the consent may be withdrawn at any time.

Your data from the contact form will remain with us until you request deletion, withdraw your consent to storage, or the purpose of storage no longer applies (e.g. after completed processing of your enquiry). Mandatory statutory provisions – especially retention obligations – remain unaffected.

Enquiries by Email, Telephone or Fax

If you contact us by email, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your matter. We will not pass on this data without your consent.

Your data from the contact will remain with us until you request deletion, withdraw your consent to storage, or the purpose of the storage no longer applies (e.g. after completed processing of your matter). Mandatory statutory provisions – especially legal retention obligations – remain unaffected.

5. Analytics Tools and Advertising

Google Analytics

This website uses features of the web analytics service Google Analytics. Provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyse the behaviour of website visitors. The operator receives various usage data, such as page views, dwell time, operating systems used and the origin of the user. These data are assigned to the respective device. No user ID is assigned.

Furthermore, we may use Google Analytics to record your mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and employs machine-learning technologies in the data analysis.

Google Analytics uses technologies that enable recognition of the user for the purpose of analysing the user’s behaviour (e.g. cookies or device-fingerprinting). The information about your use of this website collected by Google is normally transferred to a Google server in the USA and stored there.

The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. The consent may be withdrawn at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards in US data processing. Each certified company commits to comply with those standards. Further information is available from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.

IP Anonymisation

IP anonymisation in Google Analytics has been activated. As a result, your IP address is truncated by Google within member states of the European Union or other Contracting States to the Agreement on the European Economic Area before being sent to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services relating to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent data collection and processing by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de.

More information on the handling of user data by Google Analytics can be found in Google’s privacy notice: https://support.google.com/analytics/answer/6004245?hl=de.

6. Plugins and Tools

Google Fonts (local hosting)

This site uses the so-called Google Fonts provided by Google for a uniform appearance of fonts. The Google Fonts are hosted locally. No connection to Google servers is made.

Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy notice: https://policies.google.com/privacy?hl=de.

7. E-Commerce and Payment Service Providers

Processing of Customer and Contract Data

We collect, process and use personal customer and contract data for the purpose of establishing, designing and modifying our contractual relationships. Personal data about the use of this website (usage data) is collected, processed and used only insofar as this is necessary to provide the user with the service or for billing purposes. The legal basis here is Art. 6 (1) lit. b GDPR.

The customer data collected are deleted after completion of the order or termination of the business relationship and the expiry of any statutory retention periods. Legal retention obligations remain unaffected.

Transfer of Data for Online Shops, Retailers and Goods Shipment

If you order goods from us, we share your personal data with the shipping company entrusted with the delivery and the payment service provider entrusted with payment processing. Only those data are passed on which the respective service provider needs to fulfil its task. The legal basis is Art. 6 (1) lit. b GDPR, which allows processing of data for contract performance or pre-contractual measures. If you have given consent in accordance with Art. 6 (1) lit. a GDPR, we will pass your email address to the shipping company so that it can inform you by email about the shipping status of your order; you may withdraw consent at any time.

Transfer of Data for Services and Digital Content

We only transfer personal data to third parties if this is necessary for contract processing, for example to the payment institution entrusted with the payment transaction.

No further transfer of your data takes place unless you have given explicit consent. The legal basis is Art. 6 (1) lit. b GDPR for contract performance or pre-contractual measures.

Credit Checks

In the case of purchase on account or another payment method where we advance payment, we may carry out a credit check (scoring). For this purpose we may transmit your entered data (e.g. name, address, age or bank details) to a credit agency. On the basis of these data the probability of a payment default is determined. If the risk of default is too high, we may refuse the payment method.

The credit check is carried out on the basis of contract performance (Art. 6 (1) lit. b GDPR) and to avoid payment defaults (legitimate interest Art. 6 (1) lit. f GDPR). If consent has been obtained, the check is based on consent (Art. 6 (1) lit. a GDPR); the consent may be withdrawn at any time.

Payment Services

We integrate payment services from third-party providers on our website. If you make a purchase with us, your payment data (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of payment processing. The payment service providers’ contracts and privacy notices apply. The use of the payment service provider is based on Art. 6 (1) lit. b GDPR (contract performance) and our legitimate interest (Art. 6 (1) lit. f GDPR) in a smooth, comfortable and secure payment process. If your consent is required for certain actions, the legal basis is Art. 6 (1) lit. a GDPR; consents may be withdrawn at any time.

We use the following payment services / payment service providers:

PayPal

Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”).

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details are provided in PayPal’s privacy notice: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Klarna

Provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (“Klarna”). Klarna offers various payment options (e.g. instalment payment). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimise use of the Klarna checkout solution. Details of Klarna cookies can be found here: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Details can be found in Klarna’s privacy notice under: https://www.klarna.com/de/datenschutz/.

Sofort (instant bank transfer)

Provider of this service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (“Sofort GmbH”). Using the “Sofort transfer” method, we receive real-time payment confirmation from Sofort GmbH and can begin fulfilment immediately. When you choose payment by “Sofort transfer”, you provide your PIN and a valid TAN to Sofort GmbH, which logs into your online banking account. Sofort GmbH automatically checks your account balance and transfers the payment to us using the TAN. Your transaction is confirmed to us without delay. After login your transactions, your overdraft credit line and existence of other accounts and their balances are automatically verified. In addition to the PIN and the TAN, your payment data and personal data you entered are sent to Sofort GmbH. These personal data include first and last name, address, telephone number(s), email address, IP address and possibly other data required for payment processing. The transfer of these data is necessary to identify you beyond doubt and to prevent fraud. Details on payment using Sofort transfer can be found here: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Mollie

Provider of this service is Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, The Netherlands (“Mollie”). Using Mollie we can integrate various payment methods on our website. Details can be found in Mollie’s privacy notice: https://www.mollie.com/de/privacy.

giropay

Provider of this service is paydirekt GmbH, Stephanstraße 14-16, 60313 Frankfurt am Main (“giropay”).

Details can be found in giropay’s privacy notice: https://www.paydirekt.de/agb/index.html.

Mastercard

Provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (“Mastercard”).

Mastercard may transfer data to its parent company in the USA. The data transfer is based on the Binding Corporate Rules of Mastercard. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

Visa

Provider of this payment service is Visa Europe Services Inc., Branch Office London, 1 Sheldon Square, London W2 6TT, United Kingdom (“VISA”).

The United Kingdom is considered a data-protection-safe third country. This means that the UK has a level of data-protection equivalent to that of the European Union.

Visa may transfer data to its parent company in the USA. The data transfer is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

Further information can be found in Visa’s privacy notice: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

8. In-house Services

Handling of Applicant Data

We offer you the possibility to apply to us (e.g. by email, by post or via online application form). Below we inform you about the scope, purpose and use of the personal data you provide in the application process. We assure you that the collection, processing and use of your data are carried out in compliance with applicable data protection law and all other statutory provisions and that your data are treated strictly confidentially.

Scope and Purpose of Data Collection

If you send us an application, we process the personal data associated with it (e.g. contact and communication data, application documents, notes within the context of interviews etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 (1) lit. b GDPR (general contractual pre-arrangement) and – if you have given consent – Art. 6 (1) lit. a GDPR. Consent may be withdrawn at any time. Your personal data are shared within our company exclusively with persons involved in processing your application.

If the application is successful, the data submitted are stored on the basis of § 26 BDSG and Art. 6 (1) lit. b GDPR for the purpose of executing the employment relationship in our data-processing systems.

Retention Period of Data

If we cannot make you a job offer, you reject an offer, or you withdraw your application, we reserve the right to retain your submitted data on the basis of our legitimate interests (Art. 6 (1) lit. f GDPR) for up to 6 months after the end of the application process (rejection or withdrawal). Afterwards the data will be deleted and any physical application documents destroyed. The retention service is particularly for evidential purposes in the event of legal disputes. If it is evident that the data will still be required after the 6-month period (e.g. due to an impending or ongoing legal dispute), deletion will only take place once the purpose for the extended retention ends.

A longer retention may also take place if you have given consent (Art. 6 (1) lit. a GDPR) or if statutory retention obligations prevent deletion.

Inclusion in the Applicant Pool

If we are unable to make you a job offer, there may be the option to include you in our applicant pool. In this case all documents and information from the application will be included in the applicant pool in order to contact you in case of suitable vacancies.

Inclusion in the applicant pool is carried out exclusively on the basis of your explicit consent (Art. 6 (1) lit. a GDPR). Giving consent is voluntary and is unrelated to the ongoing application procedure. You can withdraw your consent at any time. In that case the data will be deleted from the applicant pool without delay, provided there are no statutory retention grounds.

The data in the applicant pool will be deleted no later than two years after consent was given.