Responsible for data processing:

GVW Raumdekor GmbH
Karl-Carstens Straße 17
52146 Würselen

Contact details of our data protection officer:
E-Mail: datenschutz@gvw-group.com

Supervisory authority:
State representative for data protection and freedom of information Nordrhein-Westfalen
Ms. Helga Block
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: 0211 / 38424-0
Fax: 0211 / 38424-10
E-Mail: poststelle@ldi.nrw.de

Without prejudice to one You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data is contrary to the GDPR violates.
The supervisory authority to which the complaint was submitted informs the complainant about the status and the results of the complaint including the possibility of a judicial remedy according to Art. 78 GDPR.

I. Data collection when you visit the website

Your personal data (eg title, name, address, email address, telephone number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU) . The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data. This data protection declaration only applies to our website. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.

In principle, you can use the website without providing information about your personal identity. When you visit the website, the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file.

The following information is recorded without any action on your part and stored until it is automatically deleted:

IP address of the requesting computer, date and time of access , Name and URL of the retrieved file, browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The data mentioned are processed by us for the following purposes:
Guaranteeing the connection to the website , Ensuring the optimal use of the website, evaluating the stability of the system and for other administrative purposes.

The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 lit. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

II. Data processing for the fulfillment of a contract

Your personal data, which you provide to us during the ordering process, are required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without giving your address. For some payment methods, we need the necessary payment data in order to pass them on to a payment service provider commissioned by us. The processing of your data entered during the ordering process is therefore carried out for the purpose of fulfilling the contract.

If you send us an inquiry by email, using a contact form, etc. before concluding the contract, we will process the data received in this way for implementation pre-contractual measures and answer, for example, your questions about our products. The legal basis for this processing is Art. 6 Para. 1 b) GDPR.

Recipients of the collected data can be: hosting provider, possibly merchandise management system.

If you provide us with data in the context of the conclusion of the contract we process the data received in this way to carry out contractual measures. The legal basis for this processing is Article 6 (1) b) GDPR.

Recipients of the data can be: Payment service providers, shipping service providers, hosting providers, if necessary merchandise management system, if necessary suppliers (dropshipping).


The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and a contract is clearly not concluded.


The personal data collected by us for the execution of the contract will be stored until the statutory retention period expires and then deleted, unless we are based on Article 6 Paragraph 1 Clause 1 lit. of tax and commercial law retention and documentation obligations (from e.g. § 257 HGB, § 147 AO) to a longer storage or you have consented to a further storage according to Art. 6 Abs. 1 S. 1 lit. a GDPR.

RIGHT OF OBJECTION
You have the right to object to data processing that is based on Art. 6 Para. 1 f) GDPR and is not used for direct advertising for reasons en, which arise from your particular situation, at any time.
In the case of direct mail, however, you can object to the processing at any time without giving reasons.

III Information about cookies

General
Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, several products to be placed in a shopping cart.

The legal basis for this processing is Article 6 (1) f) GDPR.
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This safeguards your interest in data protection.

The technically necessary cookies are usually deleted when you close the browser. Permanently stored cookies have a different lifespan from a few minutes to several years.

RIGHT TO OBJECT
If you do not want these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this can restrict the functionality of our website. You can also delete permanently stored cookies via your browser at any time.
Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after changing pages.
The following data is stored and transmitted in the cookies:
IP address, date and time of your request, language settings.

We also use cookies on our website, which enable an analysis of the surfing behavior of the users. In this way, the following data can be transmitted: entered search terms, frequency of page views, use of website functions. The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user.

b) Legal basis for the data processing
The legal basis for the processing of personal data using cookies is Article 6 Paragraph 1 lit. f GDPR .
The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f GDPR.

c) Purpose of data processing
The purpose of using technically necessary cookies is to make websites easier for users to use. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.
The user data collected by technically necessary cookies are not used to create user profiles.
For these purposes, our legitimate interest lies in the processing of personal data Data according to Art. 6 Para. 1 lit. f GDPR.

e) Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted from there to our site. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.


Integration of Google Maps
(1) We use Google Maps on this website. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.
(2) When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this declaration will be transmitted. This happens regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this.
(3) For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to Data protection declarations of the provider. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

IV. Further functions

Contact form / Inquiry form
If you have any questions, we offer you the opportunity to contact us using a form provided on our website. It is necessary to provide a valid email address so that we know who sent the request and to be able to answer it. Further information can be provided voluntarily. It is up to you to decide whether you would like to enter this data in the contact form.

The data processing for the purpose of contacting us takes place in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR on the basis of your voluntary granted consent.
The personal data collected by us for the use of the contact form will be automatically deleted after your request has been dealt with, unless storage is necessary for further processing of the request or there is a legitimate interest in storage. < br>
RIGHT OF OBJECTION
You have the right to object at any time to data processing that is based on Art. 6 Para. 1 f) GDPR and is not used for direct advertising for reasons that arise from your particular situation .
In the case of direct mail, however, you can object to the processing at any time without giving reasons.


VII Rights of the affected person on

If your personal data are processed, you are affected within the meaning of the GDPR and you have the following rights towards us:

1. Right to information
You can request confirmation from us as to whether personal data relating to you is being processed by us.
If such processing is available, you can request information from us about the following information:
(1 ) the purposes for which the personal data are processed;
(2) the categories of personal data that are processed;
(3) the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
(4) the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the Storage period;
(5) the existence of a right to correction or deletion of your personal data, a right to restrict processing by us or a right to object to this processing;
(6) the existence of a right to lodge a complaint with a supervisory authority ;
(7) all available information about the origin of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making including profiling in accordance with Art. 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the T Extensive and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data relating to you is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.

2. Right to rectification
You have a right to rectification and / or completion vis-à-vis us if the processed personal data concerning you is incorrect or incomplete. We must make the correction immediately.

3. Right to restriction of processing
You can request the restriction of processing of personal data concerning you under the following conditions:
(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables us to to check the correctness of the personal data;
(2) if the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
(3) if we use the personal data for the purposes of processing no longer need, but you need them to assert, exercise or defend legal claims, or (4) if you have objected to processing in accordance with Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons to which we are entitled outweigh your reasons.
Was the Processing of the personal data concerning you is restricted, this data may only - apart from its storage - with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
If the processing restriction has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.

4. Right to erasure

a) Obligation to erase
You can request that we erase your personal data immediately, and we are obliged to erase this data immediately if one of the following reasons applies: < br> (1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based in accordance with Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) You object to Art. 21 Para. 1 GDPR the processing and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
(4) The personal data relating to you have been processed unlawfully.
(5) The deletion of you The personal data is required to fulfill a legal obligation under Union law or the law of the member states to which we are subject.
(6) The personal data relating to you were collected in relation to information society services offered in accordance with Art. 8 (1) GDPR collected.

b) Information to third parties
If we have made the personal data concerning you public and we are obliged to delete it according to Art. 17 Paragraph 1 GDPR, we take into account the available technology measures, including technical measures, appropriate to the implementation costs, in order to ensure that those responsible for data processing who process the personal data, to inform that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c) Exceptions
The right to deletion does not exist insofar as the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation required by the law of the Union or of the member states to which we are subject, or to perform a task that is in the public interest or is carried out in the exercise of public authority that has been assigned to us;
(3) for reasons of public interest in the field of public health in accordance with Article 9 (2) lit. h and i and Art. 9 Para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, insofar as the right mentioned under section a) is likely to make the realization of the objectives of this processing impossible or seriously impaired, or
(5) for the establishment, exercise or defense of legal claims.

5. Right to information
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction or erasure of the data or restriction of processing , unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.

6. Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person responsible without hindrance, provided that (1) the processing is based on consent in accordance with Art. 6 Paragraph 1 lit. a GDPR or Art. 9 Paragraph 2 lit. a DSGVO or on a contract in accordance with Art. 6 Para. 1 lit. b GDPR and
(2) the processing is carried out using automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you will be transmitted directly from us to another person responsible, as far as this is technically feasible This must not impair the freedoms and rights of other people.
The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority that is transferred to us was.

7. Right of objection
You have the right to object at any time to the processing of your personal data based on Article 6 Paragraph 1 lit. e or f GDPR for reasons that arise from your particular situation; this also applies to profiling based on these provisions.
We will then no longer process the personal data relating to you, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the Processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed in order to operate direct mail, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is related to such direct mail.
If you object to processing for direct mail purposes, the personal data relating to you will no longer be processed for these purposes.
You have the option of in connection with the use of information society services - regardless of Directive 2002/58 / EC - to exercise your right of objection by means of automated procedures in which technical specifications are used.

8. Right to withdraw your declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

9. Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - that has legal effects on you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and us,
(2) is permissible on the basis of Union or Member State legislation to which we are subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests or
(3) is made with your express consent.
However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR unless Article 9 (2) (a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
We take appropriate measures with regard to the cases mentioned in (1) and (3) to protect your rights and freedoms and your legitimate interests.

10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of the personal data concerning you violates the GDPR.
The supervisory authority to which the complaint was lodged informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR. < / p>