Privacy policy
PRIVACY POLICY
§ 1 General Information
Your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) will be processed by us solely in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases, storage periods, as well as your rights and the controller responsible for your data processing. This privacy policy applies only to our websites. If you are redirected to other websites via links on our pages, please refer to the respective websites for information on how your data is handled there.
§ 2 Data Processing for Contract Fulfillment
(1) Purpose of Processing
The personal data you provide to us during the order process is required for the conclusion of a contract with us. You are not obliged to provide your personal data. However, without providing your address, we cannot send you the goods. For certain payment methods, we require the necessary payment details in order to forward them to a payment service provider commissioned by us. The processing of the data you enter during the order process therefore takes place for the purpose of contract fulfillment.
If you contact us by email, via a contact form, etc. before concluding a contract, we process the data obtained in this way to carry out pre-contractual measures and respond to your inquiries about our products.
In the event of opening a customer account, your data (in particular name, address, payment method, email, and password) will be processed for registration and the creation of a customer login. With the stored data, you can shop faster and view your past orders at any time. You may delete your account at any time by notifying us or using a delete function.
(2) Legal Basis
The legal basis for this processing is Art. 6 (1)(b) GDPR.
(3) Categories of Recipients
Payment service providers, shipping service providers, hosting providers, possibly merchandise management systems, possibly suppliers (dropshipping).
(4) Storage Period
We store the data required for contract processing until the expiry of statutory warranty periods and, where applicable, contractual guarantee periods.
Data required under commercial and tax law will be retained for the legally prescribed periods, generally ten years (§ 257 HGB, § 147 AO).
Data processed for pre-contractual measures will be deleted once the measures have been carried out and it is clear that no contract will be concluded.
§ 3 Comments
(1) Purpose of Processing
It is possible to write a comment. Your data (e.g. name/pseudonym, email address, website) will then be processed solely for the purpose of publishing your comment.
(2) Legal Basis
The legal basis for this processing is Art. 6 (1)(f) GDPR.
(3) Legitimate Interest
Our legitimate interest is the public exchange of user opinions on specific topics and products. Publication also serves transparency and opinion-building. Your interest in data protection remains safeguarded, as you may publish your comment under a pseudonym.
(4) Storage Period
No specific storage period is set. You may request the deletion of your comment at any time.
(5) Right to Object
You have the right, on grounds relating to your particular situation, to object at any time to processing based on Art. 6 (1)(f) GDPR, unless the processing serves direct marketing purposes.
In the case of direct marketing, you may object to processing at any time without stating reasons.
§ 4 Shop Review
(1) Purpose of Processing
If you decide to review your shopping experience, we will collect and process your personal data (e.g. email address, order number, and purchase date) in order to send you a review request via our partner Judge.me and to verify the authenticity of submitted reviews.
(2) Legal Basis
Processing is based on our legitimate interest in improving our products and services and ensuring trustworthy customer reviews in accordance with Art. 6 (1)(f) GDPR.
(3) Recipient
Judge.me LLC
9th Floor, 20-22 Wenlock Road
London, N1 7GU, United Kingdom
https://judge.me
(4) Storage Period
Your data will only be stored for as long as is necessary to process and publish the review, or until you request deletion of your data.
§ 5 Further Information
Under certain circumstances, personal data collected through the online shop may be transferred to our headquarters in South Korea. This transfer is based on the adequacy decision of the European Commission of 17 December 2022 pursuant to Art. 45 GDPR, which establishes an adequate level of data protection for the Republic of Korea. In addition, personal data may be processed by external marketing platforms such as Meta/Facebook or Instagram; for this purpose, we ensure appropriate safeguards in accordance with Art. 46 GDPR (Standard Contractual Clauses) to guarantee an adequate level of protection. Responsibility for processing remains with NUC Electronics Europe GmbH.
§ 6 Web Analytics with Google Analytics
(1) Purpose of Processing
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics 4 uses "cookies," text files stored on your device, which enable analysis of your use of the website. According to Google, Google Analytics 4 does not log or store individual IP addresses. No precise location data is provided in Analytics. Instead, the following metadata is derived from IP addresses: "city" (and the derived latitude and longitude), "continent," "country," "region," "subcontinent" (and ID-based equivalents). For accesses originating from the EU, IP addresses are only used to derive location data and are immediately deleted afterward. They are not logged, not accessible, and not used for any other purposes. For measurement data collected in Analytics, all IP lookups are performed on EU-based servers before traffic is forwarded for processing to Analytics servers, which may be located outside the EU.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator.
(2) Legal Basis
The legal basis for this processing is your consent pursuant to Art. 6 (1)(a) GDPR.
(3) Categories of Recipients
Google and its partner companies.
(4) Transfer to a Third Country
Google Ireland Limited is affiliated with Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043). The basis for the transfer of personal data from the EU to the USA is the EU-U.S. Data Privacy Framework.
(5) Storage Period
2 months.
(6) Right of Withdrawal
You may withdraw your consent at any time with future effect via our cookie banner or our website.
You may prevent the storage of cookies by adjusting your browser software settings; however, please note that in this case you may not be able to use all functions of this website fully.
You can also prevent the collection of data generated by cookies relating to your use of the website and its processing by Google by downloading and installing the browser plugin available at the following link: optout.
§ 7 PayPal Transactions
Please note that all PayPal transactions are subject to the PayPal Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
§ 8 Credit Assessment
Please note the following privacy policies if you choose Google Pay payment services:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
Please note the following privacy policies if you choose Klarna payment services:
http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
Please note the following privacy policies if you choose Apple Pay payment services:
http://support.apple.com/de-de/HT203027
§ 9 Information on Cookies
(1) Purpose of Processing
This website uses technically necessary cookies. These are small text files stored in or by your internet browser on your computer system. These cookies enable, for example, the placement of multiple products in a shopping cart.
(2) Legal Basis
The legal basis for this processing is Art. 6 (1)(f) GDPR.
(3) Legitimate Interest
Our legitimate interest is the functionality of our website. The data collected by technically necessary cookies is not used to create user profiles. This safeguards your interest in data protection.
(4) Storage Period
Technically necessary cookies are usually deleted when you close the browser. Permanently stored cookies have varying lifespans, from a few minutes to several years.
(5) Right to Object
If you do not wish to store these cookies, please disable acceptance of cookies in your internet browser. However, this may limit the functionality of our website. Permanently stored cookies may also be deleted at any time via your browser.
§ 10 Affiliate Program
(1) Purpose of Processing
We operate an affiliate program through the service provider UpPromote (Secomapp), through which partners (affiliates) may refer visitors to our online shop. To track whether a purchase resulted from such a referral link, a tracking cookie and information about the order placed (including order value, order number) are processed.
(2) Legal Basis
The legal basis for this processing is your consent pursuant to Art. 6 (1)(a) GDPR, which you provided via our cookie banner.
(3) Categories of Recipients
UpPromote (Secomapp) as technical service provider for the operation of the affiliate program.
(4) Transfer to a Third Country
(currently being finalized with the provider and will be added in a future update)
(5) Storage Period
The tracking cookie is stored for the duration of the respective affiliate program tracking period (exact duration currently being finalized), after which it is deleted.
(6) Right of Withdrawal
You may withdraw your consent at any time with future effect via our cookie banner.
§ 11 Newsletter
(1) Purpose of Processing
When registering for the newsletter, your email address will be used for advertising purposes, i.e. within the scope of the newsletter we inform you in particular about products from our range. For statistical purposes, we may analyze which links in the newsletter are clicked. It is not identifiable which specific person clicked.
In addition, we use the service Klaviyo (Klaviyo, Inc.) to track the behavior of newsletter subscribers on our website (e.g. shopping cart activity, viewed products, purchase history) in order to send you personalized marketing content, e.g. reminders about incomplete orders (cart abandonment emails). This behavioral tracking applies exclusively to persons who have subscribed to the newsletter; website visitors who are not subscribed are not tracked for this purpose.
The following consent has been given separately or expressly during the order process: Thank you for registering for the Kuvings® Newsletter! You are almost there, please click the activation button.
(2) Legal Basis
The legal basis for this processing is Art. 6 (1)(a) GDPR (consent).
(3) Categories of Recipients
Klaviyo, Inc. (marketing automation service provider), where applicable other newsletter dispatch providers.
(4) Transfer to a Third Country
Klaviyo, Inc. is based in the USA. The transfer of personal data to the USA is based on appropriate safeguards pursuant to Art. 46 GDPR. (The exact basis — EU-U.S. Data Privacy Framework or Standard Contractual Clauses — is currently being finalized with the provider.)
(5) Storage Period
Your email address as well as the data collected within the scope of behavioral tracking will be stored for the duration of your newsletter subscription.
(6) Right of Withdrawal
You may withdraw your consent at any time with future effect. If you no longer wish to receive the newsletter, you may unsubscribe as follows: Thank you, we have received your cancellation. We are sorry to see you go. If you change your mind, you may re-subscribe at any time. We wish you all the best.
§ 12 Zipchat.ai (Live Chat)
(1) Purpose of Processing
To respond to customer inquiries in real time, we use the chatbot service Zipchat.ai (Zipchat Inc.). Within the scope of chat communication, the following data is processed: the content of your messages as well as, if voluntarily provided by you, your email address. The service may generate automated responses (including through the use of AI language models) based on your inquiry.
(2) Legal Basis
The legal basis for this processing is our legitimate interest in efficient and timely customer support, Art. 6 (1)(f) GDPR.
(3) Legitimate Interest
Our legitimate interest lies in the fast and resource-efficient handling of customer inquiries outside regular business hours.
(4) Categories of Recipients
Zipchat Inc. as technical service provider for the operation of the chat system.
(5) Transfer to a Third Country
Zipchat Inc. is based in the USA (407 East Ayre Street, Wilmington, DE 19804, USA). Data processing takes place on servers in the USA. The transfer of personal data to the USA is based on the EU-U.S. Data Privacy Framework as well as, additionally, on Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.
(6) Storage Period
Chat logs are stored for the period determined by us as controller and are subsequently anonymized or deleted, unless longer retention is required for security, legal, or operational reasons. (exact period currently being finalized)
(7) Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data pursuant to Art. 21 GDPR.
§ 13 Your Rights as a Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:
- Right of Access
Within the scope of Art. 15 GDPR, you may request information about your personal data processed by us. - Right to Rectification
If the information concerning you is not (or is no longer) accurate, you may request rectification under Art. 16 GDPR. If your data is incomplete, you may request completion. - Right to Erasure
You may request the erasure of your personal data under the conditions of Art. 17 GDPR. - Right to Restriction of Processing
You have the right, within the framework of Art. 18 GDPR, to request the restriction of processing of your data. - Right to Data Portability
Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, or to request the transmission of that data to another controller. - Right to Withdraw Consent under Data Protection Law
You have the right under Art. 7 (3) GDPR to withdraw your consent at any time. The lawfulness of processing based on consent before its withdrawal remains unaffected. - Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority (in particular in the Member State of your residence, workplace, or the place of the alleged violation).
Please also note your right to object under Art. 21 GDPR:
a) General Right to Object
If your personal data is processed
- for the protection of our overriding legitimate interests (legal basis Art. 6 (1)(f) GDPR), or
- in the public interest (legal basis Art. 6 (1)(e) GDPR),
you have the right, on grounds relating to your particular situation, to object at any time to the processing; this also applies to profiling based on these provisions.
In the event of objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
b) Right to Object to Direct Marketing
If your personal data is processed for direct marketing purposes, you have the right to object to this processing at any time without giving reasons; this also applies to profiling, insofar as it is related to direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Controller Responsible for Data Processing:
NUC Electronics Europe GmbH
Schwalbacher Straße 76
65760 Eschborn
Phone: +49(0)6196 950 2397
info@kuvings.de
This document was created and is updated using technology from janolaw GmbH.
