MEPHISTO E-COMMERCE GMBH DATA PROTECTION DECLARATION
MEPHISTO E-commerce GmbH (MEPHISTO E-Commerce GmbH, Kehler Str. 22, D-77694 Kehl-Marlen, Germany), acting as operator of the online store MEPHISTO, takes the protection of your personal data very seriously. We want you to know when we collect this data and how we use it. From a technical and organisational perspective, we assure you that the regulations relating to the protection of personal data are observed, both by ourselves and our external service providers who act on our behalf.
If you buy goods from our site you agree to be bound by this declaration and our General Terms and Conditions of Sale, which together form our contract with you.
We welcome your feedback and questions. If you wish to contact us, please send an email to firstname.lastname@example.org or call us on +44 2037 349 263.
COLLECTING, PROCESSING AND USING PERSONAL DATA
If a contract is agreed, we collect and process the personal data that you provide to us in our system and use it for the purposes set out in this declaration for the duration of the contract, including the fulfilment of our contractual obligations to you, notably the execution of orders and any related invoicing. We may also retain and process personal data for a reasonable period after your order is complete, for example to assist in the processing of future orders by you and for the marketing purposes set out in this declaration. Personal data is defined as any information that could be used to identify a person, whether directly or indirectly, such as, for example: name, address, email address, date of birth, profession, bank details, etc.
For publicity and market research purposes, as well as to tailor our product offer to our customers' requirements, we create and use anonymous user profiles. In addition, we use the postal and email addresses registered to inform you of information regarding products similar to your order. You can ask to opt out of this, free of charge, at any time by sending a declaration of this by email to email@example.com or by ticking the corresponding box on your order or by clicking on the relevant link at the bottom of each of our newsletters.
We will, on request, provide you with all personal information about you registered with us free of charge. You can, at any time, request the correction, removal or deletion of your personal data that is registered with us.
If our business is sold or integrated with another business your details may be disclosed to our advisers and any prospective purchasers and their advisers and will be passed on to the new owners of the business.
We only use your personal data for orders made to our company and related companies, as well as third parties mandated to carry out orders. In all other cases, unless expressly set out in this declaration we will not transmit your data to third parties without your express consent, especially for marketing purposes. Where the law or a legal ruling requires us to do so, we will transmit your data to the authorities authorised to receive them.
We store your information on highly secure servers. These are secured by technical and organisational methods that are intended to prevent the loss, destruction, access, modification or dissemination of your data by any unauthorised person. Only a few authorised persons may access your data. These persons are responsible for the technical, commercial or editorial maintenance of the servers. While we will use all reasonable efforts to safeguard your personal data, and despite all standard controls, you acknowledge that it is not possible to guarantee complete protection against all risks to or losses of any personal data that are transferred from you or to you, in particular via the internet.
Your personal data will be encrypted before being transmitted online. To transmit the data, we use SSL (secure socket layer) encryption.
ANALYSIS OF IP ADDRESSES AND ANY OTHER INFORMATION
When you access the website, your data, notably IP address, date, time and pages viewed, will be recorded on our servers. It is possible that this data may be used to identify some users.
We do not use IP addresses to identify users. However, we may use the IP addresses collected for (anonymous) statistical analysis. In addition, we use information about your IP address as well as other personal data to prevent any fraudulent use (fraud prevention) or other unlawful use of our website. We may also use information about you to select the version of our online presence corresponding to the country concerned.
PAYMENT OF ORDERS
The payment of orders depends on the payment method selected via a service provider. For payments by credit card or Paypal, it is necessary to transmit your personal information to the service provider or their intermediary so that your order can be processed. We will take reasonable steps to ensure that such service providers adhere to the standards of confidentiality and protection set out in this declaration.
Consent and WITHDRAWAL OF CONSENT
By submitting your information to us, you hereby give your express consent to the processing and use of that information in accordance with the terms of this declaration, including the transfer of your information to a location outside of the European Economic Area (EEA) for these purposes, and the processing of your information for email marketing purposes (as noted in the authorisation set out below). However, you may withdraw your consent at any time in the future by notifying us.
Authorisation to send marketing emails
By submitting your information to us, you hereby confirm as follows:
“I would like to receive offers by email. I understand that my email address will not be shared with third parties. I understand that I may, at any time, decide to opt out of these marketing emails by declaring as such.”
At the MEPHISTO online store, your security is our priority. You can browse our website and our offers completely anonymously. However, if you would like to make an order or if you send us your data by other means (by subscribing to newsletters, for example), we will record your data with your agreement.
- All data indicated through the order process are encrypted before leaving your PC and being transmitted online. To do so, we use a secure encryption method "Secure Socket Layer" (SSL) with a 128 bit encryption key, in order to prevent anyone from reading your data.
- The MEPHISTO online store works with various advertisers. It is therefore possible that the SSL symbol will not appear at the bottom of the browser window or your browser may not tell you that there is a connection with an SSL server through a dialogue box. You can, however, view the encrypted transmission of the data you have provided (https mode) by clicking on the right mouse button at the Checkout and by selecting the "Properties" and Certificates options.
The majority of cookies that we use are "session" cookies, which are deleted once your session has ended. There are also longer duration cookies that allow us to recognise visitors to our site.
You can delete the cookies that we have created at any time.
Most browsers are configured to accept cookies automatically. You can, however, deactivate cookies or configure your browser so that it tells you when cookies are being sent. Please be aware that if you deactivate cookies you may lose some functionality of our site.
PROTECTION OF MINORS
Children and minors under 18 years of age may not send us personal data without the consent of their parents or legal guardians; the use of our online store is prohibited to children and minors under 18 years of age. We do not ask children to provide personal data, nor do we collect or transmit it to third parties.
By accessing and using our online store you represent and warrant that you are at least 18 years of age.
USE OF GOOGLE ANALYTICS
This site uses Google Analytics, a website analysis service provided by Google Inc. ("Google"). Google Analytics uses analytic cookies, which are placed on your computer in order to analyse your use of the site. The information generated by the cookie about your use of the site are generally sent and stored on a Google server in the United States. Where IP anonymisation is used on this site, your IP address will only be processed in its abbreviated form in the member states of the European Union or European Economic Area. The complete IP address will only be sent in exceptional circumstances to a Google server in the United States, where it is abbreviated. Google uses this information to evaluate your use of the site, to compile activity reports for its publisher, and to provide the latter with other services relating to the activity of the site and the use of the internet. The IP address sent by your browser as part of the Google Analytics service is not collected with other data held by Google. You can deactivate cookies by configuring your browser. However, deactivating cookies may mean that you will not enjoy optimal use of all the site's functions. In addition, you can also prevent the collection and processing by Google of all data generated by the cookie concerning your use of the site (including your IP address) by downloading and installing the plugin available at the following address (http://tools.google.com/dlpage/gaoptout?hl=de).
You can find further information at tools.google.com/dlpage/gaoptout or on www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data protection). Please note that, on this site, Google Analytics is followed by the code "gat._anonymizeIp();" in order to guarantee the anonymous entry of IP addresses (IP-Masking).
DATA PROTECTION DECLARATION FOR THE USE OF GOOGLE +1
Collection and transmission of data:
With the Google +1 interface, you can publish information worldwide. Via the Google +1 push-button, you and other users can receive personalised content from Google and our partners. Google stores both the information that you have provided for +1 content and also information about the site that you have viewed by clicking on +1. Your +1 can be displayed as a message with your profile name and your photo in Google services, such as in search results or in your Google profile, or in other places on websites and advertisements on the Internet.
Google lists information on your +1 activities in order to improve Google services for you and others. In order to be able to use the Google +1 push button, you will need a globally visible, public Google profile that must at least contain the name chosen for the profile. This name will be used for all Google services. In some cases, this name can also replace another name that you have used by sharing content via your Google account. The identity of the Google profile may be displayed to users who know your email address or who have other information that could identify you.
Use of collected data:
Other than for the purposes described herein, the information that you provide in relation to the Google +1 interface will be used in accordance with current provisions relating to Google data protection, as publicised by Google from time to time. Google may publish global statistics regarding +1 activities of users or send them to users and partners, such as publishers, advertisers or related websites.
USE OF FACEBOOK SOCIAL PLUGINS
Our online presence uses the social plugins ("plugins") of social network, facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Plugins are accompanied by a Facebook logo or followed by "Facebook Social Plugin".
If you view a site with our online presence or one that uses this kind of plugin, your browser will establish a direct connection with Facebook servers. The content of the plugin will be directly transmitted to your browser by Facebook and as such integrated into the website.
By integrating plugins, Facebook receives information about your access to and use of the site in question. If you are logged into Facebook, Facebook may associate your visit with your Facebook account. If you interact with plugins, by clicking the "like" button or leaving a comment, for example, the corresponding information will be directly transmitted by your browser to Facebook, where it will be recorded.
To find out the purpose and volume of the data collected, as well as to find out more about the processing and collection of data by Facebook, your rights and the possibility of amendments to protect your private life, please refer to the "Facebook Data Policy", as publicised by Facebook from time to time.
If you would not like Facebook to collect information about you via our site, you must log out of Facebook before visiting our site.