Privacy Policy of Chairmarkt AG for Direct Data Collection (Art. 13 GDPR)

I. Scope

This Privacy Policy applies to the online offering of Chairmarkt AG (Gamechair.gg). We would like to explain to you in a clear, transparent and comprehensible manner how your personal data is processed in connection with your visit to and use of our website. The following descriptions of the data processing activities, the associated rights and obligations, and in particular the limitations on the scope of data processing, apply within the scope of the GDPR.

II. Name and Address of the Controller

We, Chairmarkt AG, are the controller within the meaning of Art. 4(7) of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as other data protection provisions for our website (Gamechair.gg) and the associated data processing. Comprehensive information about our company can be found in the legal notice (Impressum).

Contact person: Christof Markus, Ruiz Lutter Chairmarkt AG Auerstraße 59 86156 Augsburg Email: info@chairmarkt.com Website: Gamechair.gg (hereinafter referred to as "Chairmarkt AG")

III. Data Protection Officer

You can reach our Data Protection Officer using the following contact details: Data Protection Officer of the company c/o IT LAW AND ORDER UG (haftungsbeschränkt) Sterzinger Straße 3 D-86165 Augsburg Phone: +49 (0) 821 6660 6600 Email: datenschutz@chairmarkt.com

IV. Hosting

The web server used to operate our website is run by: kommdirekt GmbH, Provinostr. 52, 86153 Augsburg

V. Provision of the Website and Log Files

1. Description and Scope of Data Processing

Each time you access our website, your internet browser transmits data to our web server, as is technically necessary. During an ongoing connection for communication purposes, our system automatically records information from the system of the accessing computer or end device of the user.

We collect the following data:

  • Information about the web browser and the version used
  • The operating system of the user's end device
    The user's internet service provider
  • The user's IP address
  • The previous website from which the user accessed our website (referrer URL)
  • Date and time of the access request
  • Name of the requested file
  • Amount of data transferred

2. Legal Basis for the Data Processing

The legal basis for the temporary storage of this data and the log files is Art. 6(1)(f) GDPR (our legitimate interest as the responsible website operator).

3. Purpose of the Data Processing

The temporary storage of the user's IP address by our system is necessary to enable delivery of the website to the user's computer. For this, the user's IP address must remain stored for the duration of the session. Storing the aforementioned data in log files is done to ensure the functionality of our website. This data also helps us optimize the website and ensure the security of our information technology systems (e.g. for detecting attacks). No evaluation of the data for marketing purposes takes place in this context.

4. Duration of Storage

The above-mentioned data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected for providing the website, this is the case once the respective session has ended. In the case of data stored in log files, this is the case after 60 days at the latest. Storage beyond this period is possible. In this case, the user's IP address is deleted or anonymized so that it can no longer be linked to the accessing client and no longer constitutes personal data.

VI. Contact Form and Email Contact

1. Description and Scope of Data Processing

You can contact us via our contact form and the email address info@chairmarkt.com provided. In this case, the personal data of the sender (the user) transmitted with the inquiry is stored. First name, last name, and email address of the sender are mandatory fields. Other form fields are optional.

2. Legal Basis for the Data Processing

The legal basis for processing this data, which is transmitted when an inquiry is sent, is Art. 6(1)(f) GDPR (our legitimate interests as the controller). If the inquiry aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR (performance of a contract).

3. Purpose of the Data Processing

The processing of this personal data serves exclusively to process your inquiry.

4. Duration of Storage

The above-mentioned data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent via email or the contact form, this is the case once the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

5. Right to Object

Users have the right to object to the processing of their data at any time. Objections should be directed to the following email address: datenschutz@chairmarkt.com . All personal data stored in connection with the contact request will then be deleted.

VII. Search

1. Description and Scope of Data Processing

We strive to continuously improve our search function. For this reason, and in compliance with legal requirements, we process pseudonymized usage data, which later allows us to determine whether our users were able to navigate our online portal effectively and what could be improved.

2. Legal Basis

The legal basis for this data processing is Art. 6(1)(f) GDPR.

3. Categories and Origin of Personal Data

Our search function automatically collects usage data such as search queries, IP addresses, and anonymous browser data.

4. Duration of Storage

We generally store pseudonymized usage data related to the Chairmarkt AG search function for 7 days, up to a maximum of 21 days.

5. Transfer to Third Parties or Abroad

The Chairmarkt AG search function only accesses internal company data stored on a server located in Germany. No data is transferred abroad in connection with the search function.

VIII. Use of Cookies

Our website uses cookies.

1. Description and Scope of Data Processing

When you access individual pages of our website, so-called "session cookies" are used to facilitate navigation. Cookies are small text files stored in your computer's browser directory that allow recognition but do not permit personal identification of you. They help make our offering more user-friendly, effective, and secure. Example:

  • Tracking your movements on the website
  • Helping you resume where you left off on a page
  • Remembering your saved login details
  • Setting your preferences and other personalization features

"Session cookies" therefore do not contain any personal data.

2. Legal Basis

The legal basis for this data processing is Art. 6(1)(f) GDPR.

3. Purpose of the Data Processing

The purpose is to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function). Additionally, a cookie is required for web analytics (using previously anonymized IP addresses). This means the cookie file allows us, as the operator, to track your movements on our website and obtain information you may have voluntarily provided during your visit. The use of cookies is necessary to achieve our legitimate interest in providing our services in a technically error-free and optimized manner. Where other cookies are stored (e.g. cookies for analyzing your browsing behavior), these are addressed separately in this Privacy Policy

4. Preventing Storage

You can generally prevent the storage of cookies on your hard drive by selecting "do not accept cookies" in your browser settings. You can also configure your browser to ask you for consent before cookies are set. Finally, you can delete any cookies that have already been set at any time. For instructions, please refer to your browser manufacturer's documentation or the following guide: www.meine-cookies.org/cookies_verwalten/index.html If you do not accept cookies, this may, in individual cases, lead to functional limitations of the website.

5. Duration

"Session cookies" expire at the end of the session, i.e. they are automatically deleted after your visit ends. Other cookies, so-called persistent cookies, remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit. They remain valid for our website for 12 months and are automatically deleted after that period.

6. Cookiebot by Usercentrics

We use the cookie consent technology of the provider Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot") on our website. This consent tool allows you to grant consent to data processing on the website, in particular the setting of cookies, and to exercise your right to withdraw previously granted consent. This data processing serves the purpose of obtaining and documenting required consents in order to comply with legal obligations. Cookies may be used for this purpose. Among other things, the following information is collected and transmitted to Cookiebot:

  • Date and time of the page visit
  • Random ID
  • Consent Status

Topstar GmbH does not process this data itself; the data is stored as a log file. Access to our customers' log files only occurs following prior agreement and consent from the customer. This data is not shared with any other third parties. The data processing is carried out to fulfil a legal obligation under Art. 6(1)(c) GDPR.

We have entered into a data processing agreement (DPA) with the provider Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, in accordance with Art. 28 GDPR. This agreement ensures that Usercentrics may only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

For more information on data processing, please refer to Usercentrics' privacy policy at the link https://usercentrics.com/privacy-policy/

IX. Technologies Implemented

1. Description and Scope of Data Processing

We use the tracking tool Google Analytics on our website. Google Analytics primarily uses cookies to record and systematically evaluate user interactions with our website. When specific parts of our website are accessed, the following data is stored:

  • Three bytes of the IP address of the accessing user's system (anonymized IP address),
  • The website accessed,
  • The website from which the user arrived at the accessed page of our website,
  • The subpages accessed from the accessed page,
  • The duration of the visit to the website,
  • The frequency of website visits

The software is configured so that IP addresses are not stored in full; instead, the last octet of the IP address is masked (e.g. 192.168.79.***). This means that it is no longer possible to link the shortened IP address to the accessing computer or end device of the user.

2. Legal Basis for the Data Processing

The legal basis for processing users' personal data is Art. 6(1)(a) GDPR (consent).

3. Purpose of the Data Processing

Processing user's personal data using Google Analytics allows us to analyze our users' browsing behavior. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us continuously improve our own website and its user-friendliness.

4. Duration of Storage

Data stored through tracking is deleted as soon as it is no longer needed for our record-keeping purposes. In our case, this occurs after twelve months. Processing user's personal data using Google Analytics allows us to analyze our users' browsing behavior. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us continuously improve our own website and its user-friendliness.

5. Right to Object

Using a browser add-on to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js), users can prevent Google Analytics from using their data on our website. If a user wishes to disable Google Analytics, they can download and install the add-on for their web browser. The add-on for disabling Google Analytics is compatible with common versions of Chrome, Internet Explorer, Safari, Firefox, and Opera. For the add-on to work, it must be properly loaded and executed in the browser. For Internet Explorer, third-party cookies must also be enabled. Interested users can find more information at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

X. Data Security

We protect our website and other systems through technical and organizational measures against loss, destruction, access, alteration, or dissemination of your data by unauthorized persons. In particular, your personal data is transmitted in encrypted form. During your visit to the website, we use the widely used SSL (Secure Socket Layer) procedure. Unfortunately, the transmission of information over the internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website over the internet.

XI. No Automated Decision-Making (Including Profiling)

We do not use fully automated decision-making pursuant to Art. 22 GDPR to establish or carry out our business relationship with you, which would produce legal effects concerning you or similarly significantly affect you.

XII. No Disclosure of Data

We do not disclose your personal data to third parties unless you have consented to such disclosure, or we are authorized or obligated to do so under statutory provisions and/or administrative or judicial orders. This may particularly include the disclosure of information for purposes of criminal prosecution, averting danger, or enforcing intellectual property rights.

XIII. Rights of the Data Subject

As a user of our website, you have various rights under the GDPR:

  • Right to information You can request information (Art. 15 GDPR) about your personal data processed by us (Art. 15 GDPR). In your request, you should specify your concern to help us compile the required data. Please note that your right to information may be restricted under certain circumstances in accordance with statutory provisions (in particular Section 34 BDSG and Art. 10 BayDSG).
  • Right to rectification If information concerning you is no longer accurate, you may request rectification under Art. 16 GDPR. If your data is incomplete, you may request that it be completed.
  • Right to erasure Under the conditions set out in Art. 17 GDPR, you may request the erasure of your personal data. Your right to erasure depends, among other things, on whether the data concerning you is still required by us to fulfil our statutory tasks.
  • Right to restriction of processing Under the conditions set out in Art. 18 GDPR, you have the right to request the restriction of the processing of your data.
  • Right to data portability (Art. 20 GDPR)
  • Right to object Under Art. 21 GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your data. However, we may not always be able to comply, e.g. if legal provisions require us to process the data as part of fulfilling official duties.
  • Right to withdraw consent already given, with future effect, at any time (Art. 7(3) GDPR);

Note on Withdrawal of Consent

A data subject has the right to withdraw their data protection consent to us at any time. However, this does not affect the lawfulness of processing carried out based on the consent up until the withdrawal.

  • Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) Note on Complaints to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, a data subject has the right to lodge a complaint with a supervisory authority – in particular in the member state of their habitual residence, place of work, or place of the alleged infringement – if the user believes that our processing of their personal data violates the GDPR. The competent supervisory authority is the Bavarian State Office for Data Protection Supervision. www.lda.bayern.de You may also contact the supervisory authority responsible for your place of residence. Current addresses and contact details can be found at the following link list: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

XIV. Definitions

If a user's personal data is processed, that user is a data subject within the meaning of the GDPR. Personal data pursuant to Art. 4 GDPR is any information relating to an identified or identifiable natural person. A person is identifiable if they can be identified, directly or indirectly. This can occur through assignment to an identifier such as a name, an identification number, location data, or an online identifier. Or through assignment to one or more special characteristics that express the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. The data subject is the person whose personal data is processed, e.g. the website user or the email sender.

XV. Version and Amendment of this Privacy Policy

This Privacy Policy is dated 1 May 2020. Due to technical developments and/or changes in legal and/or regulatory requirements, it may become necessary to amend this Privacy Policy. The current version of the Privacy Policy can always be accessed at this Link .

XVI. Payments

We process your payment information for the purpose of payment processing, e.g. when you purchase a product and/or use a service from Chairmarkt AG. Depending on the payment method, we forward your payment information to third parties (e.g. to your credit card provider in the case of credit card payment). The legal basis for this data processing is Art. 6(1)(a), Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR.

  • PayPal When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" via PayPal, we forward your payment data as part of payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). For the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" via PayPal, PayPal reserves the right to conduct a credit check. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide on the provision of the respective payment method. The credit check may include probability values (so-called score values). Insofar as score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. For further data protection information, including on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
  • Klarna On our website, we offer payment via services provided by Klarna, among others. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna").
    Klarna offers various payment options (e.g. installment purchase). If you choose to pay with Klarna (Klarna Checkout solution), Klarna will collect various personal data from you. Details can be found in Klarna's privacy policy at the following link: https://www.klarna.com/de/datenschutz/
    Klarna uses cookies to optimize the use of the Klarna Checkout solution. Optimizing the checkout solution constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Cookies are small text files stored on your device that cause no harm. They remain on your device until you delete them. Details on the use of Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf
    The transfer of your data to Klarna is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing for the performance of a contract). You may withdraw your consent to the data processing at any time. Withdrawal does not affect the validity of any data processing carried out in the past.

XVII. Newsletter

You may subscribe to our newsletter free of charge on our website. When you sign up for the newsletter, the data entered in the input form is transmitted to us. We use the so-called double opt-in procedure for sending the newsletter, meaning we will only send you a newsletter by email once you have expressly confirmed that we may activate the newsletter service.

The legal basis for the data processing for the purpose of sending the newsletter is Art. 6(1)(a) GDPR. We use the data collected when you sign up for the newsletter exclusively for sending newsletters. This data is not shared with third parties.

The technical handling of the newsletter dispatch is carried out by the trustworthy and data-protection-conscious service provider Kommdirekt (Kommdirekt GmbH, Martini Park Augsburg, Provinostr. 52, 86153 Augsburg). Kommdirekt is responsible solely for the technical handling under the data processing agreement, and not for contacting you directly, sending you a newsletter, or passing on your data to third parties. More information is available at https://www.kommdirekt.digital/datenschutz/.

You can unsubscribe from the newsletter at any time by clicking the unsubscribe link at the end of each newsletter. After unsubscribing, we will promptly remove your email address from our newsletter distribution list.