Privacy Policy

Note: This English version is provided for convenience only. Only the German version is legally binding.

1) Information on the collection of personal data and contact details of the controller

1.1 Thank you for your interest in our website. Below we inform you about how your personal data is handled when you use our website. Personal data is all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is meerfarbig GmbH & Co. KG, Kruppstr. 105, 60388 Frankfurt, Germany, phone: 069-170776856, fax: 069-170776859, e-mail: info@meerfarbig.net. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL/TLS encryption. You can recognize an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

2) Data collection when visiting our website

When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data:

  • page accessed
  • date and time of access
  • amount of data transferred in bytes
  • source/referrer from which you reached the page
  • browser used
  • operating system used
  • IP address used

This data is collected on the basis of Art. 6(1)(f) GDPR, in our legitimate interest in the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to review the server log files retrospectively should concrete indications of unlawful use arise.

3) Cookies

Cookies are small text files stored on your device. Session cookies are deleted when you close the browser; persistent cookies remain on your device for a specified period. Third-party cookies may be set by partner companies and may collect, among other things, browser data, location data or IP addresses.

Where cookies store settings (e.g. the contents of a shopping cart) and personal data is processed in the process, processing takes place pursuant to Art. 6(1)(b) or (f) GDPR.

You can set your browser to inform you when cookies are set, to decide on their acceptance case by case, or to exclude them generally. If cookies are disabled, the functionality of this website may be limited. Browser help pages:

4) Contact

When you contact us by form or e-mail, personal data is collected. This data is used exclusively to answer your request and for the associated technical administration. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in answering your inquiry). If your inquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis. Your data is deleted after final processing unless statutory retention obligations apply.

5) Data processing when opening a customer account and for contract performance

If you provide us with data for the performance of a contract or for opening a customer account, we process it on the basis of Art. 6(1)(b) GDPR. Which data is collected is evident from the respective input forms. You can have a customer account deleted at any time by sending a message to the controller’s address stated above. After complete contract processing or deletion of the customer account, your data is blocked, taking into account tax and commercial retention periods, and deleted after these periods have expired, unless you have expressly consented to further use or a legally permitted further use is reserved.

6) Use of your data for direct marketing

Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when making a purchase, we reserve the right to regularly send you offers for similar goods or services from our range by e-mail. No separate consent is required for this under § 7 (3) UWG (German Act against Unfair Competition); data processing is based on our legitimate interest in personalized direct marketing (Art. 6(1)(f) GDPR). If you have objected to the use of your e-mail address for this purpose, no e-mails will be sent. You can object to this use at any time with effect for the future; this incurs no costs other than the transmission costs at basic rates. After your objection, we will stop sending immediately.

7) Data processing for order handling

7.1 For order handling we work together with service providers to whom we transmit certain personal data. We pass on the data required for delivery to the commissioned transport company where necessary. We transmit payment data to the commissioned credit institution or payment service provider where necessary for payment processing. The legal basis is Art. 6(1)(b) GDPR.

7.2 Payment service providers

PayPal

When paying via PayPal, credit card via PayPal or direct debit via PayPal, we pass on your payment data as part of payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, where necessary (Art. 6(1)(b) GDPR). When paying by credit card or direct debit via PayPal, PayPal reserves the right to obtain a credit report. For this purpose, data may be transmitted to credit agencies on the basis of Art. 6(1)(f) GDPR. PayPal uses the result, where applicable with probability values (score values) based, among other things, on address data, to decide whether to provide the respective payment method. Further information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full. You can object to this processing at any time towards PayPal. However, PayPal may remain entitled to process your data where necessary for contractual payment processing.

SOFORT

If you select the payment method “SOFORT”, payment is processed through SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, to which we pass on your order data pursuant to Art. 6(1)(b) GDPR. SOFORT GmbH belongs to the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden). Data is passed on exclusively for payment processing. Data protection information: https://www.klarna.com/sofort/datenschutz

7.3 Credit checks

In the case of advance performance, e.g. for delivery on invoice, we may carry out a credit check based on mathematical-statistical methods in order to safeguard our legitimate interest in determining solvency (Art. 6(1)(f) GDPR). This may produce probability values (score values) based, among other things, on address data. We use the result to decide on the establishment, performance or termination of a contractual relationship. You can object to this processing at any time towards us or the respective credit agency. However, we may remain entitled to process your data where necessary for contractual payment processing. For this purpose we work with the following credit agencies:

CRIF Bürgel GmbH
Gasstraße 18
22761 Hamburg

Tesch mediafinanz GmbH
Weiße Breite 5
D-49084 Osnabrück

8) Tools and other matters

8.1 Google reCAPTCHA

We use reCAPTCHA of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The service distinguishes whether an input comes from a person or from an automated program. Your IP address and, where applicable, other required data are transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing misuse and spam). Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/

8.2 Google Maps

We integrate Google Maps (API) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to display our location and make it easier to find us. As soon as you visit subpages with the map, usage information (including your IP address) is transmitted to Google servers in the USA and stored there, even without a Google account. If you are logged in to Google, the data is assigned directly to your account; if you do not want this, log out beforehand. Google may create usage profiles (e.g. for advertising and market research; Art. 6(1)(f) GDPR). You can object to this; the objection must be asserted directly towards Google. If you do not want the transmission, you can disable JavaScript in your browser; the map is then not usable.

Further information:

8.3 Google Web Fonts

For uniform display of fonts we use web fonts of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit a page, your browser loads the required web fonts into its browser cache and must connect to Google servers to do so. As a result, Google learns that your IP address has accessed our website. This use is based on Art. 6(1)(f) GDPR. If your browser does not support web fonts, a standard font is used. Further information: https://developers.google.com/fonts/faq and https://www.google.com/policies/privacy/

9) Rights of the data subject

9.1 You have the following rights against the controller with regard to the personal data concerning you:

  • Access (Art. 15 GDPR): Information about your processed data, the purposes of processing, categories, recipients, storage period, the origin of the data, the existence of automated decision-making including profiling, and appropriate safeguards for transfers to third countries (Art. 46 GDPR).
  • Rectification (Art. 16 GDPR): prompt rectification of inaccurate data or completion of incomplete data.
  • Erasure (Art. 17 GDPR): erasure where the conditions of Art. 17(1) GDPR are met. Exceptions apply, among others, for the exercise of the right to freedom of expression and information, legal obligations, reasons of public interest or the establishment of legal claims.
  • Restriction of processing (Art. 18 GDPR): e.g. while the accuracy of the data is being verified, if erasure is refused, if you need the data to establish legal claims, or while an objection is being examined.
  • Notification (Art. 19 GDPR): notification to all recipients of rectification, erasure or restriction, unless this is impossible or involves disproportionate effort. You have the right to be informed about these recipients.
  • Data portability (Art. 20 GDPR): receipt of the data you have provided in a structured, commonly used and machine-readable format or transmission to another controller, where technically feasible.
  • Withdrawal of consent (Art. 7(3) GDPR): at any time with effect for the future. Processing carried out until then remains lawful. The data is deleted unless another legal basis exists.
  • Complaint (Art. 77 GDPR): complaint to a supervisory authority, in particular in the place of your residence, workplace or the alleged infringement, without prejudice to other remedies.

9.2 Right to object

If we process your personal data on the basis of an overriding legitimate interest, you may object at any time with effect for the future on grounds relating to your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. In the case of direct marketing, you can object at any time; we will then stop processing for this purpose immediately.

10) Storage period of personal data

The storage period of personal data is based on the statutory retention periods (e.g. under commercial and tax law). After these periods expire, the data is routinely deleted unless it is still required for contract performance or initiation and there is no legitimate interest in further storage.