Privacy Policy
This privacy policy informs you about the nature, scope and purposes of the processing of personal data when visiting the Wood Dealer online shop, placing orders, creating a customer account or contacting us.
1. Controller
Wood Dealer is an online shop operated by:
Holz-Liebling GmbH
Krokusweg 4
83539 Pfaffing
Germany
Phone: +49 (0) 8076 8887094
Email: info@holz-liebling.de
No data protection officer has been appointed. For privacy-related inquiries, please contact us using the contact details above.
The legal bases for data processing are the General Data Protection Regulation (GDPR) and, where applicable, the German Telecommunications Digital Services Data Protection Act (TDDDG).
2. Website Operation, Hosting and Shop System
Our online shop is operated using Shopify.
Shopify provides the technical infrastructure required to display the shop, provide shopping cart and checkout functionality, process orders and ensure the security and stability of the website.
For customers in the European Economic Area, personal data may initially be processed by Shopify International Limited, Ireland. Shopify group companies and selected subprocessors may also be involved in providing the Shopify services.
In connection with the operation of the website, technical data may be processed, including:
- IP address
- date and time of access
- browser and device information
- requested pages
- referrer URL
- status codes
- technical log and security data
The purposes of this processing are the delivery and operation of the website, provision of the online shop, stability, security, fraud prevention and technical maintenance.
The legal basis is Art. 6(1)(f) GDPR. Where processing is required for the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.
3. Cookies and Consent Management
We use cookies and similar technologies.
Technically necessary technologies may be used to provide essential functions such as the shopping cart, checkout, customer account, security functions and basic shop functionality.
Where technologies are not strictly necessary, we obtain your consent where legally required.
The legal basis for consent-based processing is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You can manage or withdraw your consent at any time with effect for the future using the cookie or privacy settings provided on this website.
Further information about technologies used on this website may be available in the cookie or consent overview.
4. Orders, Customer Accounts and Contract Processing
When you place an order or create a customer account, we process the personal data required to process your order and fulfil the contract.
This may include:
- first and last name
- billing and shipping address
- email address
- telephone number
- order and product details
- selected product configurations
- payment information
- communication data
- customer account data
The purposes of processing are order handling, delivery, payment processing, invoicing, customer service, warranty and complaint handling and fraud prevention.
The legal bases are Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(c) GDPR for compliance with legal obligations and Art. 6(1)(f) GDPR for security and fraud prevention.
Commercial and tax-related documents are stored in accordance with the applicable statutory retention periods.
5. Payment Processing
When you place an order, personal data required for payment processing may be transmitted to the payment service provider selected by you during checkout.
Depending on the payment method, this may include:
- name
- billing information
- order amount
- payment information
- transaction data
- technical information required for fraud prevention and payment processing
The available payment methods and payment providers are displayed during checkout.
The purposes of processing are payment execution, payment confirmation, fraud prevention and, where applicable, identity or security checks.
The legal basis is Art. 6(1)(b) GDPR. Where processing is necessary for fraud prevention or security purposes, Art. 6(1)(f) GDPR may also apply.
The respective payment provider may process personal data under its own responsibility. Please refer to the privacy information of the selected payment provider for further details.
6. Shipping and Delivery
For the delivery of your order, we transmit the personal data required for shipping to the shipping or logistics service provider responsible for your order.
This may include:
- name
- shipping address
- order and shipment information
- email address
- telephone number, where required for delivery notification or shipment handling
The purpose of processing is the preparation, delivery and tracking of your order.
The legal basis is Art. 6(1)(b) GDPR.
The shipping provider used may depend on the destination, dimensions, weight and other characteristics of the order.
7. Contact by Form, Email or Telephone
If you contact us using a contact form, by email or by telephone, we process the information you provide in order to respond to your inquiry.
This may include:
- name
- email address
- telephone number
- order number
- content of your message
- information about products or orders
The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract or pre-contractual measures.
For general inquiries, the legal basis is Art. 6(1)(f) GDPR based on our legitimate interest in responding to customer and business inquiries.
We store inquiries for as long as necessary to process the respective request. If the communication relates to a business transaction, statutory retention periods may apply.
8. Recipients and Processors
We use service providers for the operation of the website, online shop, IT infrastructure, payment processing, shipping and related business processes.
Personal data is only transmitted where this is necessary for the respective purpose or where another legal basis permits the processing.
Where service providers process personal data on our behalf, appropriate data processing agreements are concluded in accordance with Art. 28 GDPR where required.
9. Transfers to Third Countries
When using certain service providers, personal data may be processed in countries outside the European Economic Area.
Such transfers only take place where the requirements of the GDPR for international data transfers are met.
Depending on the recipient and destination country, transfers may be based on an adequacy decision of the European Commission, the EU-US Data Privacy Framework where applicable, Standard Contractual Clauses approved by the European Commission or other legally recognised safeguards.
10. Obligation to Provide Data
For placing and processing an order, you must provide the personal data required for the conclusion and performance of the contract, payment and delivery.
Without this information, we may not be able to process or fulfil your order.
Other information is voluntary unless expressly stated otherwise.
11. Automated Decision-Making
We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you.
Automated systems may nevertheless be used by Shopify, payment providers or other service providers for security and fraud prevention purposes.
12. Your Rights
Under the GDPR, you have the right to request:
- access to your personal data
- rectification of inaccurate personal data
- erasure of your personal data where the legal requirements are met
- restriction of processing
- data portability where applicable
You also have the right to object to processing based on Art. 6(1)(f) GDPR.
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
The supervisory authority generally responsible for us is:
Bavarian Data Protection Authority for the Private Sector (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de
13. Updates to this Privacy Policy
We may update this privacy policy if the legal situation, our services, service providers or data processing activities change.
The current version of this privacy policy is always available on this page.