Privacy policy

1. Who is responsible for data processing?

Three Mosquets UG

Eggerscheidterstr. 91

40883 Ratingen

Germany

2. On what legal basis do we process personal data?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

The processing of data can be carried out under Article 6 GDPR:

  • Based on consent,
  • To fulfill contractual obligations or pre-contractual measures,
  • In the public interest, or
  • If the processing is necessary for the protection of the legitimate interests of the controller or a third party, provided that these interests do not override the interests and fundamental rights of the data subject that require protection of personal data. A legitimate interest exists, in particular, when establishing a contract with economic obligations, such as concluding a purchase contract.

3. What data do we collect and process when you visit our website?

When you visit our website for informational purposes only, i.e., if you do not register or provide us with information in any other way, we only collect the personal data that your browser transmits to our server (the so-called "server log files"). The following data is technically necessary for us to display our website to you:

  • The IP address
  • The date and time of the request
  • The time zone difference from Greenwich Mean Time (GMT)
  • The exact content of the request (the specific page)
  • The access status/HTTP status code
  • The amount of data transmitted
  • The source/website from which the request comes
  • The browser you are using
  • The operating system and its interface
  • The language and version of your browser software

Processing is carried out in accordance with Article 6(1)(f) GDPR to ensure the smooth connection of our website, to ensure a comfortable use of our website, to evaluate system security and stability, and for other administrative purposes.

In no case do we use the collected data to draw conclusions about your person.

4. What data do we collect and process when using our online shop?

If you make an inquiry to us or wish to order goods from our online shop, we need and process certain data, such as the details of your chosen or placed order, your address, and email address, and the chosen payment method. You have the option to voluntarily provide us with additional information, such as a phone number, to facilitate faster contact.

You may voluntarily create a customer account, through which we can store your data for future purchases. When creating a customer account under "My Account," the data you provide is stored for the duration of the existence of the customer account and can be revoked at any time. The legal basis for this is Article 6(1)(a) GDPR.

We process the data you provide for contract execution, depending on the chosen payment method, for pre-contractual checks, and for potential warranty claims. The legal basis for this is Article 6(1)(c) and (f) GDPR.

Additionally, the service providers we use (such as logistics companies, payment processors) receive the necessary data regarding your person or your order. Depending on the chosen payment method, we also conduct credit checks. Without the relevant personal data, we may not be able to accept orders at all or only offer limited payment options.

As part of our business operations, we process your data using our IT systems. We sometimes use external service providers for data processing. These providers are carefully selected, commissioned, bound by our instructions, and regularly monitored.

We may also process the data you provide to inform you about other interesting products from our portfolio or to contact you on certain occasions.

5. How are data collected and processed when inquiries or communications are made by post, fax, email, or through a contact form?

If you send us inquiries or communications by post, fax, email, or through a contact form that relate to orders, we store your inquiry or communication and our response in accordance with our commercial and tax law retention obligations as correspondence related to the respective order or your customer account.

For other inquiries or communications sent by post, fax, email, or through a contact form, we use the personal data provided in the inquiry solely to respond to your inquiry and do not store your inquiry or the personal data provided therein afterward.

6. To whom do we disclose personal data?

When you visit our website, we use cookies and/or analytics services. We provide a detailed explanation of this in the further course of our privacy policy.

In the context of orders, we disclose your personal data to the shipping company responsible for delivery as necessary for delivering ordered goods. For payment processing, we pass on the required payment data to the bank responsible for the payment and, if applicable, to the payment service providers commissioned by us or to the payment service provider you selected during the order process.

As required, we transfer data of customers, prospects, suppliers, and our own personnel to authorities in accordance with legal obligations, such as to tax authorities and external consultants (tax advisors, lawyers, auditors), as necessary to operate our company economically and in compliance with applicable law.

7. How long do we store personal data?

The duration of the storage of personal data is based on the respective legal retention period. In particular, obligations arise from commercial and tax law to archive data from completed transactions for the duration of the legal retention periods. The legal basis for these data uses is Article 6(1)(c) GDPR.

After the expiration of the respective legal retention period, the data is routinely deleted unless it is still required for the performance or initiation of a contract and/or we have no legitimate interest in further storage.

8. What rights do data subjects have with regard to data processing?

Applicable data protection law grants our customers and visitors of our website the following rights regarding their personal data:

a) Right to information according to Article 15 GDPR

You have the right to request confirmation from us as to whether your personal data is being processed. If this is the case, you have the right to obtain information about this personal data and to receive details about:

  • The purposes of processing,
  • The categories of personal data being processed,
  • The recipients or categories of recipients to whom the personal data has been or will be disclosed, particularly recipients in third countries or international organizations,
  • If possible, the planned duration for which the personal data will be stored or, if not possible, the criteria used to determine this duration,
  • The existence of the right to rectification or erasure of your personal data or restriction of processing by the controller or a right to object to such processing,
  • The existence of a right to lodge a complaint with a supervisory authority,
  • If the personal data was not collected from you, all available information about the source of the data, and
  • The existence of automated decision-making, including profiling.

b) Right to rectification according to Article 16 GDPR

You have the right to request the immediate correction of inaccurate personal data concerning you.

c) Right to erasure according to Article 17 GDPR

You have the right to request the erasure of your personal data under the conditions set out in Article 17(1) GDPR. However, this right does not exist particularly if the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

d) Right to restriction of processing according to Article 18 GDPR

You have the right to request the restriction of the processing of your personal data if:

  • The accuracy of your data is contested by you, while we verify its accuracy,
  • You refuse the erasure of your data due to unlawful processing and instead request the restriction of its use,
  • We no longer need the personal data for processing purposes, but you need it for the establishment, exercise, or defense of legal claims, or
  • If you have objected to processing on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours.

e) Right to data portability according to Article 20 GDPR

You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transfer to another controller, provided that the processing is based on consent or a contract and is carried out by automated means.

f) Right to withdraw consent given according to Article 7(3) GDPR

You have the right to withdraw your consent to the processing of your personal data at any time. No additional costs (other than transmission costs according to your provider's base rates) will be incurred. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

g) Right to lodge a complaint according to Article 77 GDPR

You have the right to lodge a complaint with a competent supervisory authority, particularly in the member state of your residence, workplace, or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.

9. What personal data provision is required?

In our online shop, we cannot accept orders without the provision of certain personal data, or we may only offer limited payment options.

10. What consents have you given us?

For contact purposes related to advertising or certain data uses, you may have given us consent (e.g., for receiving a newsletter or displaying offers after logging in as a customer). If you have given us consent, the consent texts are stored with us and can be retrieved. Please contact us via email at the address given in section 1 of this privacy policy. We will then send you the requested information by email.

11. Use of Cookies

To make our website appealing and to enable the use of certain features, we use so-called cookies on various pages. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies serve to make our online offering more user-friendly and effective. Cookies do not damage your device and do not contain viruses, trojans, or other malware.

Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called transient or session cookies).

Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (so-called persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to the extent specified. Persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie.

If cookies we use process personal data, the processing is carried out according to Art. 6 (1) f) GDPR to safeguard our legitimate interests in the best possible functionality of our website and a customer-friendly and effective design of the site visit.

We may work with third-party providers who help us make our online offering more interesting for you. For this purpose, cookies from third parties may also be stored on your device when you visit our website. If we collaborate with such third parties, you will be separately informed about the use of such cookies and the scope of the information collected in the further course of our privacy policy.

Please note that you can configure your browser to be informed about the setting of cookies. You can set your browser to decide whether to accept cookies or to exclude the acceptance of cookies in certain cases or generally. The setting of cookie preferences varies across different browsers. The adjustment of settings regarding the acceptance or rejection of cookies is described in the help menu of each browser, which shows you how to change your cookie settings. You can also delete the stored cookies at any time according to your browser.

Please note that if you do not accept cookies, the functionality of our website may be limited.

12. Subscription to Our Newsletter

With your consent, you can subscribe to our newsletter, with which we will inform you about our current interesting offers. The advertised goods and services are specified in the consent declaration.

To sign up for our newsletter, we use the so-called double opt-in procedure. This means that after you sign up, we will send an email to the provided email address asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Additionally, we store the IP addresses used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any misuse of your personal data.

The only mandatory information for sending the newsletter is your email address. Providing additional, separately marked data is voluntary and is used to address you personally.

After your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis for this is Art. 6 (1) a) GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can revoke it by clicking on the link provided in each newsletter email or by sending an email to the address given under section 1 of this privacy policy.

13. Use of Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies," which are text files stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet use to the website operator. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en

14. Use of Facebook Social Plugins

Our website uses social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the addition “Facebook Social Plugin.” When you visit a page of our website that contains such a plugin, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted by Facebook directly to your browser and embedded into the website by it. By embedding the plugins, Facebook receives the information that you have visited the corresponding page of our website. If you are logged into Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or leaving a comment, the corresponding information is transmitted by your browser directly to Facebook and stored there. The purpose and scope of data collection, the further processing and use of the data by Facebook, as well as your rights and settings options to protect your privacy, can be found in Facebook’s privacy policy. We point out that we, as the provider of the pages, do not have knowledge of the content of the transmitted data or its use by Facebook. If you do not want Facebook to collect data about you through our website, you must log out of Facebook before visiting our website.

15. Data Security

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to us). You can recognize whether a page of our website is encrypted by the closed padlock symbol in the lower status bar of your browser.

We also employ suitable technical and organizational measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continually improved in line with technological developments.

16. No Use of Automated Decision-Making

We assure you that we do not engage in automated decision-making, including profiling.

17. Information on the Right to Object to Processing According to Art. 21 DS-GVO

You have the right to object to the processing of your personal data, based on Art. 6 (1) e) or f) DS-GVO, at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions.

If you object to the processing, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Please send your objection to the contact details provided at the beginning of our privacy policy.