Privacy Policy
Since 25 May 2018, the uniform requirements of the EU General Data Protection Regulation ("GDPR") apply in the area of data protection throughout Europe. In the following data protection information, we inform you about the processing of personal data carried out by Nullpunkt GmbH https://nullpunkt.co in accordance with the DSGVO and the Federal Data Protection Act ("BDSG 2018").
Please read our data protection information carefully. If you have any questions or comments about our data protection information, please feel free to contact us at hello@nullpunkt.co.
Content
1. Name and contact details of the data controller
2. Contact details of the data protection officer
3. Purposes of the data processing, legal bases and legitimate interests pursued by the data controller or a third party, and categories of recipients.
3.1. Accessing websites/applications of the controller
3.1.1 Log files
3.1.2. Cookies, tracking, social media plug-ins
3.2. Establishment, performance and/or termination of a contract
3.2.1. Data processing upon conclusion of the contract
3.2.2. Transmission of data to logistics companies and shipping partners
3.3. Data processing for advertising purposes
3.3.1. Newsletter
3.3.2. Competitions
3.4. Online presence and website optimisation
3.4.1 Cookies - General Information
3.4.2 Google Adwords
3.4.3 Squarespace Analytics
3.4.4. Objection/opt-out option
3.5. Social media plug-ins
3.5.1. Facebook
3.5.2.Twitter
3.5.3.Instagram
3.6. Contact
3.7. Payment service providers
4 Recipients outside the EU
5 Your rights
5.1 Overview
5.2 Right of objection
5.3 Right of withdrawal
1. Name and contact details of the data controller
This data protection information applies to data processing by
Nullpunkt GmbH
Shanghaiallee 9
20457 Hamburg
Email address: hello@nullpunkt.co
Website: https://nullpunkt.co
2. Contact details of the data protection officer
Nullpunkt GmbH is not obliged to appoint a data protection officer in accordance with Art. 37 DSGVO. Please address any enquiries regarding data protection to the contact address mentioned under point 1.
3. Purposes of data processing, legal bases and legitimate interests pursued by the data controller or a third party as well as categories of recipients
3.1 Accessing websites/applications of the data controller
3.1.1 Log files
Whenever websites/applications of Nullpunkt are accessed, information is sent to the server of our website/application by the respective internet browser of your respective end device and temporarily stored in log files, the so-called log files. The data records stored in this process contain, among other things, the following data, which is stored until automatic deletion: Information on the time of the retrieval, name of the page accessed, IP address of the requesting device, referrer URL (origin URL from which you came to our websites), the amount of data transferred, loading time, as well as product and version information of the respective browser used and the name of your access provider. The legal basis for the processing of the IP address is Article 6 (1) (f) DSGVO. Our legitimate interest results in particular from
(1) Ensuring a smooth connection setup,
(2) Ensuring a comfortable use of our website/application,
(3) The evaluation of system security and stability.
A direct conclusion to your identity is not possible on the basis of the information and will also not be drawn by us. The aforementioned data is stored and automatically deleted after the aforementioned purposes have been achieved. The standard periods for deletion are based on the criterion of necessity.
3.1.2 Cookies, tracking, social media plug-ins
We use cookies, tracking tools, targeting methods and social media plug-ins for our website/application. The exact procedures involved and how your data is used for this purpose are explained in detail below.
3.2 Establishment, performance and/or termination of a contract
3.2.1 Data processing when concluding a contract
If you register with one of our websites/applications and/or conclude another contract with us, e.g. purchase a product via our website, we process the data required for the conclusion, execution or termination of the respective contract with you. This includes:
- First name, last name
- Billing and delivery address
- E-mail address
- Billing and payment data, if applicable
- Telephone number
The legal basis for this data processing is Article 6(1)(a) and (b) DSGVO, i.e. you provide us with the data on the basis of the respective contractual relationship (e.g. processing of a purchase contract) between you and us. We are also obliged to process your e-mail address in the event of a purchase via our websites/apps due to legal requirements in the German Civil Code (BGB) to send an electronic order confirmation (Article 6(1)(c) DSGVO).
Insofar as we do not use your data for advertising purposes, we store the data collected for contract processing for the duration of the contract as well as until the expiry of the statutory or possible contractual warranty and guarantee claims. After the expiry of this period, we retain the information of the contractual relationship required by commercial and tax law for the periods determined by law. For this period, the data will be processed again solely in the event of an audit by the tax authorities.
The following data processing is also required for the execution of a purchase contract via our websites/applications:
We pass on details of your delivery address to logistics companies and shipping partners commissioned by us. The respective data is transmitted solely for the respective purposes and deleted again after delivery has taken place.
3.2.2 Transmission of data to logistics companies and shipping partners
For the purpose of delivering ordered goods, we work together with logistics service providers/transport companies and/or shipping partners: The following data may be transmitted to them for the purpose of delivery of the ordered goods or for their announcement: First name, last name, postal address.
The legal basis for the processing is Art. 6(1)(b) DSGVO.
3.3 Data processing for advertising purposes
3.3.1 Newsletter
On our websites/applications we offer you the possibility to register for our newsletter. In order to ensure that no mistakes are made when entering the email address, we use the so-called double opt-in procedure (DOI procedure): After you have entered your email address in the registration field and given your consent to receive our newsletter, we will send you a confirmation link to the address you have provided. Only when you click on this confirmation link will your email address be included in our distribution list for sending our newsletter. The legal basis for this data processing is Article 6(1)(a) DSGVO.
Note right of revocation
You can revoke your consent at any time with future effect by sending a message to hello@nullpunkt.co or using the unsubscribe option at the end of each newsletter.
3.3.2 Raffles
If you register for a raffle organised by us, we will use the data you provided during the respective registration/registration for the purpose of implementing the participation agreement, in particular to notify you of the prize. Detailed information can be found in the respective conditions of participation for the respective competition. The legal basis for this data processing is Article 6(1)(a) DSGVO, Article 6(1)(b) DSGVO and Article 6(1)(f) DSGVO.
3.4 Online presence and website optimisation
3.4.1 Cookies - General Information
We use cookies on various pages to make visiting our website attractive and to enable the use of certain functions as well as to statistically record the use of our website. Cookies are small text files that are automatically created by your browser and stored on your respective end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. However, this does not mean that we gain direct knowledge of your identity.
Most of the cookies we use are deleted at the end of the browser session (so-called session cookies). These enable us to offer you, for example, the cross-page shopping basket display, in which you can see how many items are currently in your shopping basket and what your current purchase value is. Other cookies remain on your computer and enable us to recognise your computer the next time you visit us (so-called permanent or cross-session cookies). These cookies in particular serve to make our offer user-friendly, more effective and safer. Thanks to these files, it is possible, for example, for you to receive information on the site that is specifically tailored to your interests.
Of course, you can set your browser so that it does not store our cookies on your end device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie or how to delete all cookies you have already received and block them from all further use.
To do this, please proceed as follows:
Select the entry "Create according to user-defined settings".
Now you can set whether cookies should be accepted, how long you want to keep these cookies and add exceptions, which websites you always or never want to allow to use cookies.
Confirm your setting with "OK".
In Google Chrome:
Click on the Chrome menu in the browser toolbar.
Now select "Settings".
Click on "Show advanced settings".
Under "Privacy", click on "Content settings".
Under "Cookies" you can make the following settings for cookies:
Delete cookies
Block cookies by default
Delete cookies and website data by default after closing the browser.
Allow exceptions for cookies from certain websites or domains.
However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
Insofar as these cookies and/or the information contained therein are personal data, the legal basis for data processing is Art. 6(1)(f) DSGVO. Our interest in optimising our website is to be regarded as legitimate within the meaning of Art. 6(1)(f) DSGVO.
3.4.2 Google Adwords
Our website uses the Google Adwords service, an online advertising programme o of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 ("Google").
In doing so, we use the remarketing function within the Google AdWords service. The remarketing function enables us to present users of our website with advertisements based on their interests on other websites within the Google display network (on Google itself, so-called "Google Ads" or on other websites). For this purpose, the interaction of users on our website is analysed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google display network. This number, known as a "cookie", is used to record the visits of these users. This number is used to uniquely identify a web browser on a specific computer and not to identify a person, personal data is not stored. The legal basis for this data processing is Article 6(1)(f) DSGVO.
You can deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: www.google.com/settings/ads/plugin.
More information on Google Remarketing as well as Google's privacy policy can be found at: www.google.com/privacy/ads/einsehen.[TM6].
3.4.3 Squarespace Analytics
Nullpunkt uses Squarespace Analytics, a web analytics service provided by Squarespace Ireland Ltd. , Le Pole House, Ship Street Great, Dublin 8, Ireland ("Squarespace").Squarespace Analytics uses cookies. The data generated by cookies about the use of our website is transmitted to a Squarespace server in the USA and stored there. Squarespace is certified under the EU-US data protection agreement "Privacy Shield" and thus undertakes to comply with EU data protection requirements. Squarespace uses the data to evaluate the use of the website by the visitor, to compile reports on the visitors' activities on the website and to provide other services related to the use of the website. Where Squarespace is required to do so by law, or where third parties process the data on its behalf, the data will be transferred to those third parties. Squarespace will never associate your IP address with any other data held by Squarespace. You have the option of preventing cookies from being stored on your computer by making the appropriate browser settings (see above).
The legal basis for data processing is Article 6(1)(f) DSGVO. More information on data protection at Squarspace is available at https://www.squarespace.com/privacy/.
3.4.4. Objection/opt-out option
In addition to the deactivation methods already described, you also have the option of deactivating preference-based advertising using the preference manager available here.
3.5 Social media plug-ins
We use social plug-ins from the social networks Facebook and Twitter on our website on the basis of Article 6 (1) (f) of the German Data Protection Act (DSGVO) in order to make our company better known and to give users the opportunity to share content. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation is to be ensured by their respective service providers.
The purpose and scope of the data collection and the further processing and use of the data by the respective provider as well as your rights in this regard and setting options for protecting your privacy can be found in the respective data protection information of the provider, which we link to below.
By logging out of the pages of social networks beforehand and deleting cookies that have been set, you can prevent social networks from assigning the information collected about you to your user account with the respective social network during your visit. If you do not want social networks to directly assign the data collected via our website to your profile, you must log out of the corresponding social networks before visiting our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker "NoScript", which can be found at: http://noscript.net.
3.5.1 Facebook
Social plugins from Facebook are used on this website. These are offers from the US company Facebook.
When you visit a page that contains such a plugin, your browser establishes a connection to Facebook and the content is loaded from these pages. Your visit to this website may be tracked by Facebook, even if you do not actively use the social plugin function. If you have an account with Facebook, you can use such a social plugin and thus share information with your friends. Nullpunkt has no influence on the content of the plugins and the transmission of information.
Facebook provides detailed information on the scope, type, purpose and further processing of your data on its website. Here you will also find further information on your rights and setting options to protect your privacy.
Facebook data protection information: https://www.facebook.com/about/privacy.
3.5.2 Twitter
Functions of the Twitter service are also integrated on this website. These functions are offered by Twitter Inc, 795 Folsom St, Suite 600, San Francisco, CA 94107, USA ("Twitter"). By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. Your internet browser establishes a direct connection to Twitter's servers for this purpose and transmits data to Twitter.
We would like to point out that we have no knowledge of the content of the transmitted data or its use by Twitter. You can find more information on this in Twitter's privacy policy: https://twitter.com/privacy.
You can change your privacy settings on Twitter in the account settings http://twitter.com/account/settingsändern.
3.5.3 Instagram
Plugins of the social network Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA ("Instagram") are also integrated on this website. You can recognise the Instagram plugin by the "Instagram button" on our site.
If you click on the "Instagram button" while you are logged into your Instagram account, you can link the content of our pages on your Instagram profile. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Instagram. For further information, please refer to Instagram's privacy policy: http://instagram.com/about/legal/privacy/.
3.6 Contacting us
You have the option of contacting us by email, telephone or via our contact form. When you contact us, we process the personal data that you voluntarily provide to us in the course of contacting us for the purpose of contacting you and processing your request. The legal basis for this data processing is Art. 6(1)(a), Art. 6(1)(b), Art. 6(1)(c) DSGVO and Art. 6(1)(f) DSGVO.
3.7 Payment service providers
Nullpunkt uses external payment service providers through whose platforms our customers can make payment transactions. Our legitimate interest results, among other things, from offering our users effective and secure payment options.
The data processed by the payment service providers includes inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, total and recipient-related information. These details are necessary to carry out the transactions. The respective data is only processed by and stored with the payment service providers. Nullpunkt does not receive any account or credit card related information from you, but only information with confirmation or negative information of the payment.
The respective terms and conditions and data protection notices of the respective payment service provider apply to the payment transactions. The legal basis for this data processing(s) is Art. 6(1)(a), Art. 6(1)(b), DSGVO and Art. 6(1)(f) DSGVO.
Paypal
When paying via PayPal, your payment data will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Sofortüberweisung
We also offer payment by instant bank transfer. All you need is your account number, BIC or bank code, and the PIN and TAN of your online banking account. During the ordering process, you will automatically be redirected to the secure payment form of Sofort GmbH. Immediately afterwards, you will receive confirmation of the transaction. We will then directly receive the transfer credit. Anyone who has an activated online banking account with PIN/TAN procedure can use Sofortüberweisung as a payment method. Please note that a few banks do not yet support payment by instant transfer.
You can find more information about this via the following link: www.sofort.com/ger-DE/general/fuer-kaeufer/fragen-und-antworten/.
4. Recipients outside the EU
With the exception of the processing described above, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The aforementioned processing operations include the transfer of data to the servers of the providers of tracking and targeting technologies commissioned by us. These servers are located in the USA. The data transfer takes place on the basis of so-called standard contractual clauses of the EU Commission and according to the principles of the so-called Privacy Shield.
5. Your rights
5.1 Overview
In addition to the right to revoke the consent you have given to us, you have the following further rights if the respective legal requirements are met:
the right to information about your personal data stored by us (Art. 15 DSGVO), in particular you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it has not been collected directly from you;
the right to have inaccurate data corrected or to have correct data completed (Art. 16 DSGVO),
the right to have your data stored by us deleted (Art. 17 DSGVO), insofar as no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed by us,
the right to restrict the processing of your data (Art. 18 DSGVO), insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure; the controller no longer requires the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 DSGVO,
the right to data portability pursuant to Art. 20 DSGVO, i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to request the transfer to another controller
the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
You can assert the aforementioned rights to which you are entitled vis-à-vis us at hello@nullpunkt.co.
5.2 Right of objection
Under the conditions of Article 21(1) of the GDPR, data processing may be objected to on grounds relating to the specific situation of the data subject.
The above general right to object applies to all processing purposes described in this Privacy Notice which are processed on the basis of Article 6(1)(f) DSGVO. Unlike the specific right of objection directed at data processing for promotional purposes, we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible risk to life or health).
5.3 Right of withdrawal
If we process data on the basis of your consent, you have the right to revoke this consent at any time. The revocation of the consent does not have the consequence that the data processing carried out on the basis of the consent up to the time of the revocation becomes ineffective.