Data protection declaration www.portal-outdoor.com

 

Data protection is particularly important in our company and when using our website. The use of our website www.portal-outdoor.com is essentially possible without providing personal data. We only process users' personal data insofar as this is necessary to provide a functional website and to provide and provide our services.

 

The processing of personal data is generally only carried out with the consent of the user. An exception to the prior consent of the user only exists if the prior consent is technically and actually not possible and the processing of the data is permitted by law.

 

On our website portal-outdoor.com we present our range of goods from the outdoor and camping area. You have a simple and non-binding opportunity to get an overview of our range of goods. In addition, you have the option of purchasing the goods shown via the shop software integrated on our website portal-outdoor.com. Personal data is processed for these processes, more details are shown in the following points.

 

 

(1) Legal basis

Insofar as we have the data subject's consent to the processing of personal data or we obtain it from the data subject, Art. 6 para. 1 lit. a of the GDPR legal basis for data processing.

 

If we are contractually connected to the data subject and the processing of personal data is necessary to fulfil our contractual obligations, the data processing takes place on the basis of Art. 6 para. 1 lit. b GDPR. This also applies to processing operations that are necessary in the course of initiating contractual relationships.

 

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 para. 1 lit. c GDPR is the legal basis.

 

If processing is necessary to safeguard the legitimate interests of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, then the data will be processed on the basis of Art. 6 para. 1 lit. f. GDPR.

 

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage acc. of the named legal bases does not apply. Storage can also take place if this has been provided for by the legislature by means of regulations to which we are subject. The stored data will also be blocked or deleted if the storage period prescribed by the standards mentioned expires, unless the further storage is necessary for the fulfilment of contractual purposes.

 

 

(2) Data controller within the meaning of the GDPR

The person in charge regarding the General Data Protection Regulation (GDPR) and other national data protection laws of the EU Member States, as well as other data protection regulations, is:

 

Lei Zhou

Westfield Otudoors GmbH

Siemesdyk 60

47807 Krefeld

 

Tel: 02151 - 644 140

Email: info@portal-outdoor.com

Website: portal-outdoor.com

 

 

(3) Operation of an online shop

We have set up an online shop on our website that enables you to order our goods. For the execution of the order, the customer enters personal data as part of the order processing, which we store. These include:

 

- Surname, first name

- Address (billing and delivery address)

- Payment data

- E-mail address

 

The data is absolutely necessary to process your order and to deliver the goods. Data processing is mandatory to fulfil our (purchase) contractual obligations, the legal basis is Art. 6 para. 1 lit. b GDPR.

 

To process the order, we must also pass the data on to third parties. These are primarily service providers from the areas of order processing, payment processing and transport. The personal data collected for the ordering process will be deleted after the order has been carried out. For more information about your rights, please refer to the last paragraph of this data protection declaration.

 

We work with I-Fulfillment in the area of order processing. You can find out more about this company here: https://www.i-fulfilment.co.uk/

 

Furthermore, the data will be forwarded to transport and parcel services (DPD and GLS) who need the data for the delivery of your order.

 

You can find more information on the data protection provisions of GLS here:

https://gls-group.eu/DE/de/datenschutz-standard

 

You can find more information on DPD's data protection regulations here:

https://www.dpd.com/de/de/datenschutz/

 

The disclosure of the data is also necessary to the payment service providers you selected in the ordering process.

 

You can find more information on PayPal's data protection regulations here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

 

You can find more information on DPD's data protection regulations here:

https://stripe.com/de/guides/general-data-protection-regulation

 

 

(4) Registration on our website

On our website, we offer users the opportunity to register, during which you will be asked to provide personal information. The data is entered into an input screen and transmitted to us and stored. This data shall not be passed on to third parties. The following data is collected during the registration process:

 

- Surname, first name

- Address (billing and delivery address)

- E-mail address

- Phone Number

- Personal password

 

The following data will be stored upon registration:

User's IP address

Date and time of registration

 

The user's consent to processing this data is obtained during the registration process. The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 Para.(a) of the GDPR. If registration is performed to fulfil a contract to which the user is a party or to implement pre-contractual measures, an additional legal basis for the data processing is Art. 6, para. 1 lit. b GDPR.

 

A registration of the user is necessary for the provision of certain content and services on our website and simplifies the processing of orders via our online shop as well as multiple orders, e.g. via watch lists, which you can create and access under your profile. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified.

 

As a user, you have the option of cancelling your registration at any time. You may at any time change the data we have stored about you. To do this, log into your account and change or delete the data. The account can of course also be completely deleted by us if you ask us to do so.

 

 

(5) Contact form and email contact

We offer a contact form for certain offers, which can be used to contact us electronically. If a user takes advantage of this offer, the data entered in the input mask will be transmitted to us and saved. The following data can be entered: name, address, telephone number, email address.

 

During the dispatch process, your consent is obtained for processing data and reference is made to this privacy policy.

 

Alternatively, you can contact us via the e-mail address provided. If you use this option, your personal data will be transmitted along with the email, both of which will be stored.

 

The legal basis for processing is your consent under Art. 6 para. 1 lit. b GDPR. In other cases, the legal basis for data processing is the user's consent in accordance with Art. 6 para. (a) of the GDPR.

 

The processing of personal data from the contact form or an email serves to process the establishment of contact in accordance with the request and specification of the user. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

 

The data transmitted by the user will be deleted after being sent. For the data transmitted via contact form or email, this is the case when the respective conversation with the user has been completed.

 

The user has the option at any time to revoke his consent to the processing of personal data and to object to the storage of his personal data at any time. It is sufficient if the user informally informs us verbally or in writing; certain communication channels are not required. We recommend notification by email. In this case, all personal data saved by us in the course of contacting us via the contact form or email will be deleted.

 

 

(6) Provision of the website and creation of log files

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.

 

The following data is collected:

1. Host name / IP of the visitor
2. Exact time of the page visit
3. Accessed URL 
4. HTTP Status Code
5. Transferred bytes of the requested URL
6. If available, the referrer (referring page)
7. Information about the visitor's browser and PC

 

The data will be stored in the log files of our system. The data collected is not stored in connection with other personal data of the user.

 

The legal basis for temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. Therefore, your IP address must remain stored for the duration of the session. The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation is carried out for other purposes.

 

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event of the collection of data for the provision of the website, this is the case at the end of the respective session. Generated log files will be deleted after 7 days at the latest. If storage beyond this is done, the recorded IP addresses are deleted or altered, so that it is no longer possible to assign the accessing client.

 

The collection of data for the provision of our website and the storage of the data in log files is absolutely necessary for the operation of the website; the user has no option to object.

 

 

(7) Use of cookies

Our website uses cookies. Cookies are text files that are stored on the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.

 

We use cookies on our website to enable the shop and inquiry form to function properly. The user data collected in this way is pseudonymised by technical precautions, so it is not possible to assign the data to a user. The data is not stored together with other personal data of the user.

 

When accessing our website, users are informed by an information banner on the use of cookies for analytical purposes and referred to this data protection declaration. The storage of cookies can be prevented in the browser settings.

 

The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f, GDPR. Cookies are used to ensure the smooth functioning of the shop and our website.

 

Cookies are stored on the user's device and transmitted to us by the user. In this respect, the user has full control over the use of cookies and can deactivate or restrict the use of cookies via the settings on their internet browser. Cookies which have already been saved may be deleted at any time. If cookies are deactivated for our website, the functionality of our website may be restricted.

 

 

(8) Web analysis by Google Analytics

For our website we use Google Analytics, a web analysis service from Google Inc, (1600 Amphitheater Parkway Mountain View, CA 94043, USA). This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyse user's activities across devices.

 

Google Analytics uses cookies (see above) that are stored on your computer and that analyse your use of the website. Cookie-generated information about your use of this website is usually transmitted to and stored on a Google server in the USA. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within the member states of the European Union or in other countries that are contracting parties to the Agreement in the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and truncated there. The IP address provided by your browser in the framework of Google Analytics will not be combined with other data from Google.

 

On our behalf, Google will use this information for the purpose of evaluating your use of the website, for compiling reports on website activity, and for providing us other services relating to website activity and internet usage. Our legitimate interest in data processing lies in the provision of these services. The legal basis for the use of Google Analytics is therefore Art. 6 para. 1 lit. f GDPR. The data sent by us and linked with cookies, user IDs or advertising IDs are automatically deleted after 14 months. Once the retention period for a piece of data has expired, it will be automatically deleted in a process that is run once a month. Google provides more information on the terms of use and data protection of Google Analytics under the link https://marketingplatform.google.com/about/analytics/terms/gb/.

 

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please be advised that if you opt out of using cookies, you may not be able to use all the features of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug that is available at the following link https://tools.google.com/dlpage/gaoptout?hl=gb . Opt-out cookies prevent any future collection of your data when you visit this website.

 

9. Rights of the data subject

If you process personal data, you have the following rights:

 

1. Right to information

You may demand a confirmation from us as to whether we are processing or have processed personal data concerning you.

If such is indeed the case, you can request the following information from the responsible entity:

 

(a) the purposes for which personal data are processed;

1. b) the categories of personal data being processed;

(c) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

(d) the planned storage duration of personal data concerning you or, if specific information in this respect is not possible, criteria for determining the storage period;

(e) the existence of a right of revision or deletion of personal data that concerns you or of a restriction on processing by the responsible party or of a right to object to such processing;

(f) the existence of a right of appeal to a supervisory authority;

(g) any available information regarding the origin of the data if the personal data has not been collected from the data subject;

(h) the existence of automated decision-making, including profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

 

You have the right to be informed as to whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees under Art. 46 of the GDPR in relation to the transmission.

 

1. right to revision,

You have a right to correct and/or add to the personal data held by the data controller if it is incorrect or incomplete. We are required to make the correction immediately.

 

1. Right to restrict processing

You may ask for the processing of your personal data to be restricted under the following conditions:

 

(a) you dispute the accuracy of the personal data concerning you for a period that enables the responsible party to verify the accuracy of the personal data;

(b) the processing is unlawful and you decline the deletion of the personal data, and instead request that the use of the personal data be restricted;

(d) the responsible party does not need the personal data for longer than the purposes of processing, but you need it for the assertion, exercise or defence of legal claims, or

(e) you object to processing in accordance with Art. 21 para.1 GDPR and it has not yet been established whether the legitimate reasons for the data controller to process your data outweigh your right to object.

 

If the processing of personal data concerning you has been restricted, then – apart from its storage – this data may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of an important public interest on the part of the Union or a Member State.If the limitation of the processing has been restricted for any of the grounds listed above, you will be notified by the data controller before the restriction has been lifted.

 

1. Right to deletion

Deletion obligation

You have the right to demand that we delete your personal data and we must do so without delay if any of the following reasons applies:

 

(a) the personal data that concerns you is no longer necessary for the purposes for which it was collected or otherwise processed;

(b) you revoke your consent, removing the legal basis for processing under Art. 6 para.1 a) or Art. 9 para.2 lit. a) GDPR and there is no other legal basis for the processing;

(c) According to Art. 21 para.1 GDPR, and there are no overriding legitimate grounds for its continued processing, or you submit an objection to its processing in accordance with Art. 21 para.2 GDPR; 40/5000 Objection to processing.

(d) the personal data that concerns you has been processed unlawfully;

(e) The deletion of personal data is required in order to comply with legal obligations according to Union law or the laws of the Member States to which the data controller is subject.

(f) The personal data that relates to you has been collected in connection with offered information society services pursuant to Art. 8 para.1 GDPR.

 

 

Exceptions

The right to deletion does not exist if processing is necessary:

(a) to exercise the right of freedom of expression and information;

(b) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;

(c) for reasons of public interest in the field of public health in accordance with Art. 9 para.2 (h) and (i), as well as Art. 9 para.3 GDPR;

(d) for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para.1 GDPR, to the extent that the right referred to in Section a) is likely to render impossible or seriously inhibit the achievement of the purposes of such processing; or

(e) to assert, exercise or defend legal claims.

 

1. Right to information

If you have asserted the right to have your data corrected or deleted or have restricted its further processing, we are obliged to notify all recipients to whom your personal data has been disclosed of the same, unless this proves to be impossible or involves disproportionate effort. You have the right to be informed about who these recipients are.

 

1. RIGHT TO DATA PORTABILITY

You have the right to obtain a copy of the personal data we have on file about you in a structured, commonly used, machine-readable format. Moreover, you have the right to transmit this data to another data controller without any obstruction from the data controller to whom the personal data has been given, if

 

(a) the processing is based on consent under Art. 6 para.1 a) of the GDPR or Art. 9 para.2 lit. a GDPR or on the basis of a contract in accordance with Art. 6 para.1 lit. b GDPR and

(b) the processing is performed using automated procedures.

 

In exercising this right, you also have the right to have us transfer the personal data we have on file about you directly to another party if this is technically feasible. This action must not affect the freedoms and rights of other persons.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the data controller.

 

1. Right to object

You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 para.1 lit. e or f GDPR, including profiling based on those provisions.

We will no longer process the personal data relating to you unless we can prove a compelling, legitimate reason for the same which outweighs your interests, rights, and freedoms, or unless the processing serves to assert, exercise, or defend our legal claims.

If the personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to such processing; this also applies to profiling insofar as it is associated with such direct marketing.

If you object to your data being processed for direct marketing purposes, your personal data will no longer be processed for such purposes.

In the context of the use of information company services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object to using an automated process.

 

1. Right to withdraw the data protection declaration of consent

You have the right to revoke your consent at any time. This revocation will not affect the lawfulness of any processing done beforehand.

 

1. Automated decision in individual cases, including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – that has legal bearing on you or that significantly affects you in a similar manner. This shall not apply if the decision

 

(a) is necessary for the conclusion or fulfilment of a contract between you and the responsible party;

(b) is permissible on the basis of legislation of the Union or the Member States, to which the responsible party is subject, and these laws contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests, or

(c) is undertaken with your express consent.

 

However, these decisions may not be based on special categories of personal data, pursuant to Art. 9 para.1 of the GDPR, unless Art. 9 para.2 lit. a or g GDPR apply and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.

In the cases referred to in (a) and (c), we shall take reasonable measures to safeguard your rights, freedoms, and legitimate interests, including, at a minimum, the right to obtain the intervention of a person on our part to state our position and to challenge the decision.

 

1. The right to file a legal complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of the GDPR.

The watchdog authority with whom the appeal is filed shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR.

 

 

As of January 2021