SANGI Europe GmbH : Privacy Policy

Thank you for your interest in our website. The protection of your privacy is very important to us. The legal basis for data protection hereunder can be found in the German General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).
Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes, for example, the person's name, e-mail address or telephone number.
In the following we inform you in detail about our way of handling of your data. „If there are any differences between the German version and this English translation, the German version takes precedence.“
Responsible for the processing of your personal data is:
SANGI Europe GmbH (represented by Managing Director Roslyn Hayman), 
Register: AG Munich, HRB 256774 
Leopoldstrasse 244 
D-80807 Munich, Germany 
(hereinafter "SANGI Europe GmbH" or "we") 
Tel: +49 (0) 89 - 208 039 387 
Fax: +49 (0) 89 - 208 039 388 
Personal data is only collected, used and passed on by us if this is permitted by law or if the user agrees to the same.

1. Data transmission security

This website uses SSL encryption for security when transmitting personal data and other confidential content. Such secure connection can be recognized by the lock symbol in the address line of the browser.

2. Storage of access data in server log files

You can visit the web pages of this on-line store without giving any personal information.

In so-called server log files, only access data is stored, such as the name of the requested file, date and time of access, amount of data transferred and requesting provider, Internet Protocol (IP) address, website from which the request originates, browser used, and operating system used. (Legal basis : Art.6 para.1 p.1 lit.f GDPR).

The log files contain IP addresses and other data that allow an assignment to you as a user. This data will not be stored together with other personal data of the user.
These data are analysed exclusively to ensure the trouble-free operation of the site, in particular delivery of the website to the user's computer, and to improve our services. An evaluation of the data for marketing purposes does not take place in this context.
However SANGI Europe GmbH reserves the right to subsequently check the log data if there is a justified suspicion of illegal use based on concrete evidence.

3. Data collection and use for contract processing, opening a customer account and for contacting you

In accordance with Art.6 para.1 lit.b GDPR, we collect your personal data when you voluntarily provide us with this information in the context of your order, when you contact us (e.g. via contact form or e-mail) or when you open a customer account, insofar as this data is required for those purposes. Which data is collected can be seen from the respective input forms. Furthermore, when you send the message entered in the input form, the IP address of the source computer and the date and time of sending will be stored.
We use the data you provide us with to process contractual transactions between us and to handle your inquiries. After completion of processing or deletion of your customer account, your data will be blocked from further use, i.e. its handling will be restricted and deleted after expiry of the retention periods prescribed by tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to do so which is permitted to us by law and about which we inform you. (See Section 4 below). Your customer account can be deleted at any time, either by sending a message to the contact option described below or by using a function in your customer account intended for this purpose.
SANGI Europe GmbH does not collect or store credit card data. Payment by credit card shall be made through the Dutch online payment service provider Mollie B.V. (https://www.mollie.com/de ), through which instant bank transfers and Giropay online transfers are also processed. Payment via the payment service provider PayPal is also possible.
In order for you to participate in the bonus program, a record of the credit of points resulting from your order history needs to be kept.

4. Data transfer for contract fulfillment

In order to fulfill the contract, SANGI Europe GmbH shall pass on your data to the shipping company commissioned with delivery, insofar as this is necessary for the delivery of ordered goods. For the processing of payments, we will pass on the necessary payment data to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the payment service selected by you during the ordering process. (Legal basis : Art.6 para.1 p.1 lit.b GDPR).

If you provide us with your e-mail address, either in your customer account or in the case of a one-time guest order, we will forward your e-mail address to our logistics partner, so that they can provide you with a link to track your shipment.

5. Use of cookies

Cookies are small text files that are stored on your end device.
To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages (e.g. during the ordering process to store the shopping cart or your login information). (See Section 6 below). Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device to enable us to recognize your browser the next time you visit us (persistent cookies). You can set your browser to inform you when cookies are set and to decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you do not accept our cookies, this may affect the functionality of our website.
In the case of a visiting user, no data will be assigned and no data stored, including personal data. However, we reserve the right to use the IP address or other information concerning respective visitors if this is necessary to ensure compliance with guidelines, to protect our services offered via the website, or to comply with legal obligations.
When you visit our website, an information banner informs you about the use of cookies for analysis purposes and refers you to this Privacy Policy statement.

You can find a link to the individual cookie settings at the end of this privacy policy.

6. Use of Social Plugins from Facebook and Instagram

So-called social plugins ("plugins") of the social network Facebook and the microblogging service Instagram are used on our website. These services are operated and offered by the company Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ltd").

An overview of the Facebook plugins and their appearance can be found here:
https://developers.facebook.com/docs/plugins

An overview of the Instagram buttons and their appearance can be found here:
https://about.instagram.com/blog/announcements/introducing-instagram-badges-for-webpage-embedding

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook Ltd. The content of the plugin is transmitted by Facebook Ltd. directly to your browser and integrated into the page. By integrating the plugins, Facebook Ltd. receives the information that your browser has called up the corresponding page of our website, even if you do not have a proile or are not currently logged in. This information (including your IP address) may also be transmitted by your browser directly to a server of Facebook Inc, 1601 S. California Avenue, Palo Alto, CA 94304, USA, in the USA and stored there. With regard to the USA, the European Court of Justice has determined that this is a country with an insufficient level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes without you having an adequate legal remedy against this.

You can find out what information Facebook Ltd. receives at https://www.facebook.com/privacy/explanation. If you are logged in to one of the services, Facebook Ltd. can directly assign the visit to our website to your profile on Facebook or Instagram. If you interact with the plugins, for example by clicking the "Like" or "Instagram" button, the corresponding information is also transmitted directly to a server and stored there. The information will also be published on Facebook or your Instagram account and displayed there to your contacts.

The purpose and scope of the data collection and the further processing and use of the data by Facebook Ltd. as well as your rights in this regard and setting options for protecting your privacy can be found in the privacy policy of Facebook Ltd. We have no influence on the nature and scope of the data that the plugins transmit to the servers of Facebook Ltd.

The Facebook privacy policy is available at:
http://www.facebook.com/policy.php

The Instagram privacy policy is available at:
https://help.instagram.com/155833707900388/

If you do not want Facebook Ltd. to directly assign the data collected via our website to your profile in the respective service, you must log out of the respective service before visiting our website and delete any existing cookies from your browser. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

7. Use of Google Analytics and tracking tools for web analysis

7.1 Google Analytics
This website uses the "Google Analytics" service, which is provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyse use of the website by people visiting it. The service uses text files called "cookies" (as referred to above), which are stored on your end device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
IP anonymization is used on this website. The IP address of users is shortened by Google within the member states of the EU and the European Economic Area. Due to this shortening, the personal reference of your IP address is omitted. Within the framework of the Agreement on Commissioned Data, which website operators have concluded with Google Inc., the latter uses the information collected to evaluate website use and website activity and provides services associated with Internet use.
You have the option of preventing cookies from being stored on your end device by selecting the appropriate settings in your browser. If your browser does not allow cookies, there is no guarantee that you will be able to access all functions of this website unrestrictedly.
You can also use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to and used by Google Inc. The following link will take you to the appropriate plugin: https://tools.google.com/dlpage/gaoptout?hl=de 
Alternatively, by clicking on this link, you can prevent Google Analytics from collecting data about you within this website. By clicking on the link above, you download an "opt-out cookie". Your browser must therefore allow the storage of cookies at least for this purpose. If you delete your cookies regularly, a renewed click on the above link will be necessary each time you visit this website.
Here you will find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de

7.2 Consent for Facebook Retargeting (Website Custom Audience)
A pixel of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ltd.") is integrated into our website (website custom audience pixel). Through this pixel, information about the use of our website (e.g. information about viewed articles) is collected by us and Facebook Ltd. in joint responsibility and transmitted to Facebook Ltd. This information can be assigned to your person with the help of further information that Facebook Ltd. has stored about you, e.g. due to your ownership of an account on the social network "Facebook". On the basis of the information collected via the pixel, interest-related advertisements about our offers can be displayed to you in your Facebook account (retargeting). The information collected via the pixel may also be aggregated by Facebook Ltd. and the aggregated information may be used by Facebook Ltd. for its own web purposes as well as for advertising purposes of third parties. For example, Facebook Ltd. may infer certain interests from your browsing behavior on this website and may also use this information to promote third-party offers. Facebook Ltd. may also combine the information collected via the pixel with other information that Facebook Ltd. has collected about you via other websites and/or in connection with the use of the social network "Facebook", so that a profile about you can be stored at Facebook Ltd. This profile can be used for advertising purposes. Facebook Ltd. is solely responsible for the permanent storage and the further processing shown of the tracking data collected via the pixel used on this website. In this context, Facebook Ltd., as the sole responsible party under data protection law, may store data about you in the USA. With regard to the USA, the European Court of Justice has determined that this is a country with an insufficient level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes without you having an adequate legal remedy against this.

The legal basis for this data processing is Article 6(1)(a) DSGVO (consent). You can obtain more information on data protection at Facebook Ltd. here:
 https://www.facebook.com/policy.php. Here you will also find the possibility of asserting your data subject rights (e.g. right to deletion) against Facebook Ltd. You can revoke your consent to the transfer of data to Facebook Ltd. through the use of the pixel on this website here or refuse to give your consent to the use of the pixel.

If you are not a member of Facebook, you are not affected by the data processing shown.

8. Newsletter subscription

Our website offers you a newsletter in which we inform you about current events and offers. This newsletter is sent via the newsletter service "Mailchimp". If you would like to subscribe to the newsletter, you must provide a valid e-mail address which we will supply to Mailchimp, but this is the only item of data that we will supply to them. You will receive an email from Mailchimp asking you to confirm your e-mail address, and only by confirming it (“double opt in“) will you subscribe to the Newsletter. If you do not wish to receive the newsletter, no data whatsoever will be forwarded to Mailchimp. 
You can unsubscribe from the newsletter at any time, either by sending a message to the contact address described below or by clicking on the link provided in the newsletter, and we will ensure that Mailchimp will delete your e-mail address.

9. Rights of the data subject

If your personal data is processed, you are a "data subject" within the meaning of the GDPR and have the following rights against us in our capacity as controller:

9.1 Right to information
You can request confirmation from us, as controller, as to whether personal data concerning you is being processed, and if processing is being carried out, you can demand from us the following information (if necessary, in writing and free of charge):
- processing purposes
- categories of personal data processed
- recipients or categories of recipients
- planned storage period of the personal data or specification criteria
- whether you have a right to rectification or erasure of the personal data concerning you, a right to have the processing limited by the responsible party, or a right to object to such processing
- all available data on the origin of the personal data, if it was not collected from you
- whether an automated decision-making process including profiling exists, in accordance with Art. 22 para.1, para.4 GDPR

9.2 Right of rectification
You have the right to request correction and/or completion from us as controller, if the personal data processed concerning you is incorrect or incomplete. We, as controller, must make the correction without delay.

9.3 Right to limit processing
Under certain conditions, specified in more detail in Art.18 GDPR, you may request that the processing of personal data concerning you be restricted.

9.4 Right of deletion
In addition to the regular deletion mentioned above, you can demand from us, as controller, that the personal data concerning you be deleted immediately, if one of the other reasons mentioned in Art 17 GDPR applies, with no exception.

9.5 Right to information
If you have asserted your right to rectification, erasure or limitation of processing of your personal data against us, as controller, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by us, as controller.

9.6 Right to data transferability
You have the right to receive from us, as controller, the personal data concerning you that you provided to us, in a structured, common and machine-readable format. You also have the right to have this data communicated to another person in charge, without hindrance by us, as controller, to whom the personal data has been provided, provided that
(1) the processing is based on a consent pursuant to Art.6 para.1 letter a GDPR, or Art.9 para.2 letter a GDPR, or on a contract pursuant to Art.6 para.1 letter b GDPR and
(2) the processing is being carried out by means of automated procedures.

9.7 Right to withdraw your declaration of consent under data protection law
You have the right to revoke at any time your declaration of consent under data protection law, for example your consent to use your order and address data. Revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until revocation.

9.8 Right of objection/removal
You have the right to object at any time to the processing of your personal data (which has been collected on the basis of art.6 paragraph 1 e or f GDPR).
Where you have the possibility to object to the collection or use of certain data, such as certain cookies, we have marked this at the relevant points.

9.9 Right to complain to a supervisory authority
As a rule, you can contact the supervisory authority in the place where your habitual place of residence or workplace or our company headquarters are located.

10. Possibility of contact

Please contact us directly, at the address below, if you have any questions regarding the collection, processing or use of your personal data, for information, correction or deletion of data, regarding the restriction of processing, for data transferability, as well as for the revocation of consents granted or objection to a specific use of data:
SANGI Europe GmbH
Leopoldstrasse 244 
80807 München 
Telephone: +49 (0) 89 - 208 039 387 
Fax: +49 (0) 89 - 208 039 388 
e-mail: info@sangi-eu.com 
Regardless of this option, you always have the right to contact the supervisory authority responsible for data protection directly or to use other ordinary legal remedies.
In particular, the supervisory authority within the state in which you have your permanent domicile or workplace is responsible for such complaints. Within the Federal Republic of Germany, this is the supervisory authority of the federal state in which you have your permanent residence or your job.