the Pompeiproject GbR
(as of 01.08.2020)
Within the scope of our data protection declaration, we inform our customers and visitors to our website about the collection and processing of personal data by us. Personal data are all data that can be related to an identified or identifiable natural person, for example names, addresses, e-mail addresses, but also user behavior.
1. who is responsible for data processing?
Large Parin 2a
23611 Bad Schwartau
You can reach our data protection officer at
Data protection officer
Large Parin 2a
23611 Bad Schwartau
If you have any questions regarding data protection, you can contact our data protection officer directly.
2. on what legal basis do we process personal data?
We process personal data in accordance with the European Data Protection Basic Regulation (DS-GVO) and the Federal Data Protection Act (BDSG).
The processing of data can be done according to Art. 6 DS-GVO
- on the basis of a consent,
- to fulfill contractual obligations or pre-contractual measures,
- in the public interest, or
- insofar as the processing is necessary in order to protect the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests and fundamental freedoms of the data subject which require the protection of personal data A legitimate interest exists in particular when a contract with economic obligations is established, such as the conclusion of a sales contract.
3 Which data are collected and processed by us when you visit our website?
When you visit our website for information purposes, i.e. when you neither register nor otherwise provide us with information, we only collect the personal data that your browser sends to our server (the so-called "server log files"). The following data are technically necessary for us to display our Internet pages:
- the IP address
- the date and time of the request
- the time zone difference to Greenwich Mean Time (GMT)
- the exact content of the request (the specific page)
- the access status/HTTP status code
- the amount of data transferred in each case
- the source/internet site from which the request comes
- the browser you use
- the operating system used and its interface
- the language and version of your browser software.
The processing is carried out in accordance with Art. 6 Para. 1 f) DS-GVO to ensure a smooth connection to our Internet pages, to ensure convenient use of our Internet pages, to evaluate system security and stability and for other administrative purposes.
Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
4 Which data are collected and processed by us when using our online store?
If you send an inquiry to us or want to order goods in our online store, we need and process certain data, such as in particular the details of the order selected or made by you, your address and e-mail address and the chosen method of payment. You have the option of voluntarily providing us with additional information such as a telephone number, for example, to enable us to contact you more quickly.
You can voluntarily create a customer account, through which we can store your data for further purchases at a later date. When you create a customer account under "My Account", the data you provide will be stored revocably for the period of time the customer account exists. The legal basis for this can be found in Art. 6 para. 1 a) DS-GVO.
We process the data provided to us for the execution of the contract, depending on the desired method of payment for a pre-contractual examination and for a possible processing of warranty claims. The legal basis for this can be found in Art. 6 para. 1 c) and f) DS-GVO.
In addition, the service providers used by us (such as logistics companies, payment agents) receive the necessary data about your person or your order. Depending on the chosen payment method, we also carry out credit checks. Without correct information of personal data, we can either not accept orders at all or only offer a limited selection of payment methods.
Within the scope of the operation of our company, we process your data by means of our IT systems. In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.
We may also process the data you provide in order to inform you about other interesting products from our portfolio or to contact you on specific occasions.
5. how are data collected and processed by us in case of inquiries or messages by mail, fax, e-mail or a contact form?
If you send us inquiries or messages by post, fax, e-mail or a contact form, which refer to orders, we will store your inquiry or message as well as our reply within the framework of our commercial and tax law storage obligations as correspondence for the respective order or your customer account.
In the case of other inquiries or communications by post, fax, e-mail or via a contact form, we will use the personal data provided in the inquiry exclusively for the purpose of responding to your inquiry, but will not subsequently store your inquiry and the personal data provided in the inquiry.
6. to whom do we pass on personal data?
In the context of orders, we pass on your personal data to the shipping company commissioned with the delivery of the goods ordered, insofar as this is necessary for the delivery of ordered goods. For the processing of payments, we pass on the necessary payment data to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the payment service selected by you in the ordering process.
If necessary, we transmit data of customers, prospective customers, suppliers and our own personnel according to legal obligations to authorities, such as tax authorities and external consultants (tax consultants, lawyers, auditors), as far as this is necessary to manage our company economically and in accordance with applicable law.
7. how long are personal data stored by us?
The duration of the storage of personal data is determined by the respective legal retention period. In particular, there are obligations under commercial and tax law to archive data from completed transactions for the duration of the statutory retention periods. The legal basis for the corresponding data uses is Art. 6 Para. 1 c) DS-GVO.
After expiry of the respective legal retention period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of a contract and/or we have no legitimate interest in continuing storage.
8 What rights do data subjects have with regard to data processing?
The applicable data protection law grants our customers and visitors to our website the following rights in relation to the personal data concerning them:
1. a) A right to information in accordance with Art. 15 DS-GVO
You have the right to ask us to confirm whether personal data concerning you is being processed. If this is the case, you have the right to obtain information about this personal data and to receive information about
- the processing purposes,
- the categories of personal data processed,
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or to international organizations,
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right of rectification or erasure of personal data concerning you or of a right to have the processing limited by the controller or to object to such processing
- the existence of a right of appeal to a supervisory authority
- if the personal data is not collected from you, all available information about the origin of the data or
- the existence of automated decision making including profiling
1. b) A right of rectification in accordance with Art. 16 DS-GVO
You have the right to demand that we correct any incorrect personal data concerning you immediately.
1. c) A right to deletion in accordance with Art. 17 DS-GVO
You have the right to demand that we delete your personal data under the conditions of Art. 17 Para. 1 DS-GVO. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
1. d) A right to restrict processing in accordance with Art. 18 DS-GVO
You have the right to request us to limit the processing of your personal data, provided that
- the correctness of your data, which you dispute, is checked by us,
- you refuse to have your data deleted due to inadmissible data processing and instead demand the restriction of the processing of your data,
- we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, or
- if you have lodged an objection for reasons arising from your particular situation, as long as it is not yet clear whether our legitimate reasons outweigh the objection.
1. e) A right to data transferability in accordance with Art. 20 DS-GVO:
You have a right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another person responsible, provided that the processing is based on consent or on a contract and that the processing is carried out using automated procedures.
1. f) A right to revoke consents granted pursuant to Art. 7 para. 3 DS-GVO
You have the right to revoke your consent to the processing of your personal data at any time. You will not incur any special costs (except transmission costs according to the basic rates of your provider).
Revocation of your consent does not affect the legality of the processing of your personal data that has taken place on the basis of your consent until revocation.
1. g) A right of appeal pursuant to Art. 77 DS-GVO
You have the right to complain to a competent supervisory authority, in particular in the Member State in which you are resident, in your place of employment or in the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you is in breach of the basic data protection regulation.
9. what provision of personal data is required?
In our online store, we can accept orders either not at all or only with a limited choice of payment methods without providing accurate information about certain personal data.
10. which consents have you given us?
You may have given us permission to contact you for the purpose of advertising or certain data uses (for example, to send you a newsletter or to reproduce offers after logging in as a customer). If you have given us your consent, the consent texts are stored by us and can be retrieved. To retrieve these texts, simply contact us by e-mail at the e-mail address to be found under point 1 of this data protection declaration. We will then send you the requested information by e-mail.
In order to make our Internet presence attractive and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files which are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. Cookies are used to make our website more user-friendly and effective overall. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.
Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called transient or session cookies).
Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit us (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individually defined extent. Persistent cookies are automatically deleted after a specified period of time, whereby the time until deletion may vary depending on the cookie.
Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 f) DS-GVO in order to safeguard our legitimate interests in the best possible functionality of our Internet presence and a customer-friendly and effective design of the site visit.
Under certain circumstances, we work together with third-party providers who help us to make our Internet offer more interesting for you. For this purpose, cookies from third parties are also stored on your end device when you visit our website. If we work with the aforementioned third parties, you will be informed separately about the use of such cookies and the scope of the information collected in each case in the further course of our data protection declaration.
Please note that you can set your browser to inform you each time cookies are set. You can set your browser so that you can decide whether to accept cookies or to exclude the acceptance of cookies for certain cases or in general. The cookie settings are determined differently for different browsers. How to change the settings regarding the acceptance or rejection of cookies is described in the help menu of each browser, which shows you how to change your cookie settings. You can also delete the cookies stored in your browser at any time.
Please note that if you do not accept cookies, the functionality of our Internet pages may be limited.
12. order our newsletter
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
Your e-mail address is the only mandatory information for sending the newsletter. The provision of further, separately marked data is voluntary and will be used to address you personally.
After your confirmation we will save your e-mail address for the purpose of sending the newsletter. The legal basis for this is Art. 6 para. 1 a) DS-GVO.
13. use of Google Analytics
14. use of Facebook Social Plugins
15. data security
For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to us), our website uses SSL or TLS encryption. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of the browser you are using.
We also use suitable technical and organizational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
16. no use of automated decision making
Hereby we assure that we do not make any automatic decision making including profiling.
17. information on the right to object to processing in accordance with Art. 21 DS-GVO
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out by us pursuant to art. 6, paragraph 1 e) or f), including profiling based on these provisions.
We will then no longer process the personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh the interests, rights and freedoms of the data subject, or unless the processing serves to assert, exercise or defend legal claims.
If personal data are processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is connected with such direct marketing. If you object to processing for the purposes of direct marketing, your personal data will no longer be processed for those purposes.
Please send your objection in a form-free manner to our contact data mentioned at the beginning of our data protection declaration under item 1.