We at L-SHOP-TEAM Danmark ApS take the protection of your personal data very seriously and strictly abide by the laws relating to data protection and security. On this website, personal data are collected only in the scope necessary for technical reasons. In no case will the data collected be sold without your consent. Disclosure of data may occur in connection with requests from official bodies, court orders and legal actions or proceedings, if necessary for purposes of prosecution or enforcement of the law. The following policy notice provides an overview of how personal data is processed in connection with use of this website.

1. Contact Data

The contact partner and “controller” within the meaning of the EU General Data Protection Regulation (GDPR) with responsibility for the processing of your personal data during visits to this website is the company
L-SHOP-TEAM Danmark ApS
Borupvang 3
2750 Ballerup
Phone: +45 4111 4813
Email: gdpr@l-shop-team.eu
Represented by its managing director Jacob Bertelsen

If you have any questions or comments relating to the subject of data privacy/protection or wish to assert any of your rights against us, please contact us by letter sent through the post to the address shown above or by email to gdpr@l-shop-team.eu. You can contact our data protection officer by letter headed “attn. Data protection officer L-SHOP-TEAM” and addressed to
ISiCO Datenschutz GmbH
Am Hamburger Bahnhof 4
10557 Berlin
E-Mail: gdpr@l-shop-team.eu

2. Processing of Data on our Website

2.1. Access data and hosting

Each time you connect to our website, we collect the access data transmitted automatically by your browser to enable you to visit the website. The access data encompass the following in particular:

• Your IP address
• Name of requested data file
• Date and time of connection
• Volume of data transmitted
• Requesting provider
• Particulars of browser and operating system used
• Online identifiers (e.g. device ID, session ID)

Processing of this access data is conducted solely for the purpose of ensuring trouble-free operation of the website and improving our offering. The access data are also stored temporarily for the aforesaid purposes in our internal log files for the purpose of generating statistical information on use of our website and developing our website further in terms of the usage habits of our users (e.g. if there is an increase in the proportion of mobile devices from which the site is accessed).

In accordance with Article 6 Paragraph 1 Sentence 1 (f) of the EU General Data Protection Regulation (the “GDPR”), the purpose of this is, on the strength of a weighing of interests, to protect our overriding legitimate interest in correct presentation of our offering. All access data will be deleted not later than seven days after the end of your visit to our site.

2.2. Hosting services by a third-party provider

Under a contract for the performance of processing on our behalf, the services for hosting and presentation of the website are provided by a third party, namely qwertiko (qwertiko GmbH, Waldstrasse 41-43, 76133 Karlsruhe). This serves, on the strength of a weighing of interests, to protect our overriding legitimate interest in correct presentation of our offering. All data collected as follows in connection with use of our website or in the forms provided for that purpose in our online shop are processed on qwertiko’s servers. Processing will take place on other servers only within the scope detailed herein.

qwertiko is based in a member country of the European Union or the European Economic Area. We have concluded a corresponding processing contract with this service provider in accordance with Article 28 of the GDPR.

2.3. Registration

You have the possibility to register for our login area so as to be able to use the full scope of functions offered by our website. The particulars that must be provided by you for this purpose are indicated in our data input form as compulsory data fields. Registration is not possible unless the compulsory data is provided.

The legal basis for processing is Article 6 Paragraph 1 (b) of the GDPR.

Deletion of your customer account is possible at any time and can be done either by sending a corresponding notice to any of the contact addresses detailed above or by using the corresponding function provided in the customer account.

2.4. Orders

2.4.1. Ordering process

As part of the ordering process, we collect the following compulsory data needed for contract handling purposes:

• Title
• Firm
• First name and last name (surname)
• Date of birth (for sole traders only)
• Email address
• Password
• Invoice and shipping address.

Other particulars such as telephone and fax numbers can be provided optionally so we can also contact you via those channels in the case of any queries on our part. The legal basis for processing is Article 6 Paragraph 1 Sentence 1 (b) of the GDPR. For the purpose of contract performance, we forward your data in accordance with Article 6 Paragraph 1 Sentence 1 (b) of the GDPR to the enterprise contracted to carry out shipment/delivery, should this be necessary for delivery of the ordered goods.

2.4.2. Credit

In the case of (new) customers who pay in advance, no credit checks are conducted. If, for your initial order or any further orders placed in our webshop or through alternative ordering channels, you wish for a different mode of payment, e.g. purchase on account, we will conduct a creditworthiness check with the aim of being able to offer you an option for payment to be made after placement of the order. To this end, we will make use of the services of special credit reference agencies to score your creditworthiness. In this case, we will disclose such of your personal data as is needed for a credit check to one of the following companies:

• Merinfo Sverige AB
  Hulda Mellgrens Gata 11B
  SE-421 32 Västra Frölunda

Credit checks may also be conducted in the course of established business relationships if, for example, the legal form of a business enterprise changes, if payment irregularities, such as non-payment, occur repeatedly, or if agreements on credit limits are concluded. The legal basis for this is our legitimate interest pursuant to Article 6 Paragraph 1 (f) of the GDPR. Our legitimate interest is ensuring minimisation of the risk of default and our ability to offer you a convenient form of payment.

2.5. Making contact with us

You have various possibilities to contact us. These include the contact form, our general service telephone number and our service email address. The legal basis for the data processing is Article 6 Paragraph 1 (b) of the GDPR. The data collected by us on use of the contact form will be automatically deleted once your inquiry/request has been dealt with in full, provided we do not still need your inquiry/request in order to fulfil contractual or statutory duties (see also section “Duration of storage”).

2.6. Incorporation of YouTube videos

For some of our articles, we incorporate videos provided by the manufacturers into the product pages. The videos are stored on YouTube and can be played directly from our websites.

YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), and is a Group company of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Data may in some cases be transferred to the USA. In order to ensure comprehensive protection of your data also in this case, there are adequate guarantees or other instruments in place so as to ensure compliance with the principles of European data protection law.

The legal basis for this is Article 6 Paragraph 1 Sentence 1 (f) of the GDPR, based on our legitimate interest in the incorporation of video and image content.

Through your visit to the product pages concerned, YouTube and Google receive the information that you have accessed the corresponding sub-page of our website. This will happen regardless of whether you are logged in to YouTube or Google or not. These data are used by YouTube and Google for purposes of advertising, market research and customer-driven design of their websites. If you call up YouTube on our website when you are already logged into your YouTube or Google profile, YouTube and Google may also link this event with the respective profiles. If you do not wish for this to happen, it is necessary that you log off from Google before accessing our website.

As indicated above, you can configure your browser in such a way that it rejects cookies, or you can prevent collection of the data generated by cookies and relating to your use of this website and the processing of such data by Google by going into the Google-Ads Settings and deactivating the “personalised advertising on the web” button. In this case, Google will only show non-personalised advertising.

Further information on this can be found in the Google Privacy Policy, which is also valid for YouTube.

3. Cookies

3.1. Own cookies

For part of our services, it is necessary for us to use cookies. Cookies are small text files that are stored on your device by the browser. Cookies are not used for executing programs or loading viruses onto your computer. Rather, the main purpose of our own cookies is to provide you with an offering that is specifically tailored to your needs and to make the use of our services as little time-consuming as possible.

We use our own cookies in particular

• to save your login authentication and
• also your language settings.

Our aim with this is to make your use of our website even more convenient and personalised. These services are based on our aforesaid legitimate interests; the legal basis is Article 6 Paragraph 1 Sentence 1 (f) of the GDPR.

Most browsers are set as standard to accept cookies. However, you can adjust your browser settings so that cookies are rejected or can only be stored with prior consent. These processes are described in the help menu of your browser, which explains how to change your cookie settings. These can be found for the various browsers under the following links:

• Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
• Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
• Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
• Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html

If the use of cookies is rejected, the functionality of our website will be diminished.

We also use cookies and similar technologies (e.g. web beacons) of partners for analytical and marketing purposes. This is described in more detail in the following sections

3.2. Matomo

On our website, we use the open-source analytical software Matomo for statistical analysis of the volume of visitor traffic. Matomo is operated on our servers, and no data is passed on to third parties (e.g. Matomo). The IP address processed for recording your visit is anonymised immediately (the last 2 bytes of your IP address are anonymised). For the processing and storage of your visit, only the anonymised IP address is used. The following data may be saved in the visitor log together with a pseudonymised visitor ID (a device fingerprint):

• Anonymised IP address
• Pages accessed (date, time, URL, title, duration of stay)
• Files downloaded
• Links clicked on to other websites
• Operating system
• Browser type, version and language
• Type of device, make and model, and resolution
• Approximate location (based on anonymised IP address)
• Referrer URL (site previously visited)

Visitor logs and daily reports are automatically deleted after seven days and 24 months respectively.

You can prevent the recording of your visit by choosing the corresponding setting of your browser (“Do not track”) (see also the information contained in the previous section) or by using the following opt-out button. This creates a deactivation cookie, with the result that Matomo-Skript can no longer be executed. If no opt-out button is subsequently displayed, it is presumably being blocked by an ad blocker or other such like technology on your browser – in this case, please check your Browser settings

4. Online Presences in Social Media

We maintain online presences in social networks in order, among other things, to communicate with existing and potential customers and provide information on our products and services.

The user data are, as a rule, used for market research and advertising purposes. They enable usage profiles to be generated based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users’ computers. These usage profiles provide the basis e.g. for the placement of advertising on social networks and also on the websites of third parties.

In case of use of the social networks, users’ personal data may be processed outside of the European Economic Area. To ensure comprehensive protection of your data also in this case, adequate guarantees or other instruments are in place to ensure compliance with the principles of European data protection law.

The legal basis for the data processing is Article 6 Paragraph 1 Sentence 1(f) of the GDPR, based on our legitimate interest in effectively informing the users and communicating with them. For information on the legal basis for the data processing undertaken by the social networks on their own responsibility, please see the privacy policy notices of the social networks concerned. Further information on the various data processing activities and the possibilities for filing objections can also be found under the links provided below.

We would draw your attention to the fact that the most effective way to submit inquiries/requests relating to data protection matters is to contact the providers of the social networks concerned since only those providers have direct access to the data and can implement corresponding measures directly.

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Facebook fanpages based on an agreement on joint processing of personal data
  • Privacy policy notice: https://www.facebook.com/about/privacy/
  • Opt-out: and http://www.youronlinechoices.com
• Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Privacy policy notice: https://help.instagram.com/519522125107875
• Xing (New Work SE, Dammtorstr. 30, 20354 Hamburg)
  • Privacy Policy
• Kununu (kununu GmbH, Neutorgasse 4-8, Top 3.02, 1010 Wien, Austria and the New Work SE, Dammtorstr. 30, 20354 Hamburg)
  • Privacy Policy

5. Email Newsletter and Postal Advertising

5.1. Newsletter

If you register to receive our newsletter, we will use the data needed for this purpose, or as provided separately by you, in order to regularly send you our Email Newsletter on the strength of your consent pursuant to Article 6 Paragraph 1 Sentence 1 (a) of the GDPR.

Cancellation of the newsletter is possible at any time and can be done either by a notification sent to the contact address indicated below or via the link provided in the newsletter for that purpose. After cancellation of the newsletter, we will delete your email address unless you have expressly consented to further use of your data or we have reserved the right of additional use of data as permitted by law and of which we will inform you in this notice.

The newsletter is sent out on our behalf by a service provider operating under a contract processing arrangement, namely CleverReach (CleverReach GmbH & Co KG, CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany), to whom we will disclose your email address for this purpose.

The said service provider is based in a member country of the European Union or the European Economic Area. With this service provider, we have concluded a corresponding processing agreement that fulfils the requirements of Article 28 of the GDPR.

5.2. Postal advertising and your right to object

We further reserve the right to use your first name and last name (surname) and your postal address for our own advertising purposes, e.g. for sending you interesting offers and information on our products through the post. This serves to protect our legitimate interest pursuant to Article 6 Paragraph 1 Sentence 1 (f) of the GDPR – which, on a weighing of interests, has overriding force – in communicating with our customers for the purpose of promoting our products and services.

Mailing of the advertising is handled on our behalf by a service provider operating under a contract processing arrangement, to whom we have disclosed/will disclose your data for this purpose.

You can object to the storage and use of your data for these purposes at any time by notification sent to the contact addresses indicated below.

6. Facebook Fanpage

We operate a webpage (fanpage) on the social network Facebook, which is offered for users outside of the USA and Canada by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) and for all other users by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA (“Facebook”), in joint responsibility with Facebook, in which we are able to communicate with followers (such as our existing and potential customers) and inform them about our products and services.

We are thereby able to receive statistics from Facebook relating to the use of our fanpage (e.g. information on the number, names, interactions such as “Likes” and comments as well summarised demographic and other information or statistics). Further details on the nature and scope of these statistics can be found in the hints from Facebook and corresponding insights. Further information on the respective responsibilities can be found in the Information about Page Insights.

The legal basis for this data processing is Article 6 Paragraph 1 (f) of the GDPR, on the strength of our aforesaid legitimate interest.

All processing of data performed by Facebook in this context on its own responsibility in conformity with the terms and conditions of use of Facebook is beyond our control. We would, however, draw your attention to the fact that in the course of visits to the fanpage, data relating to your user behaviour of Facebook and the fanpage is disclosed to Facebook. Facebook processes the aforesaid information itself for the purpose of generating detailed statistics and for its own market research and promotional purposes, and we have no influence on this. More detailed information on this can be found in the Facebook Data Policy. In the event that personal data should be transferred to the USA, adequate guarantees or other instruments for ensuring compliance with the principles of European data protection law are in place in order to safeguard your data also in this constellation.

If and insofar as, in operation of the fanpage, we receive your personal data, you are entitled to the rights set forth in this privacy policy notice. If you wish to additionally assert your rights against Facebook, the easiest way for you to do so is to contact Facebook directly. Facebook is familiar both with the details of technical operation of the platform and the associated data processing as well as the concrete purposes of the data processing and, if you avail yourself of your rights, is in the position to implement the appropriate measures in response to your inquiry/request. We will be pleased to assist you in asserting your rights insofar as it is possible for us to do so, and will pass on your inquiries/requests to Facebook.

7. Job Applications

We offer you the possibility to apply for job vacancies with us via the email address info@l-shop-team.se. The purpose of collecting the data in this case is to select applicants for the possibility of establishing an employment relationship with them. For the purpose of receiving and processing your application, we collect the following data in particular: First name and last name (surname), email address, application documents (e.g. certificates, references, CV), indication of earliest possible starting date and pay/salary expectations. The legal basis for the processing of your application documents is Article 6 Paragraph 1 Sentence 1 (b) and Article 88 Paragraph 1 of the GDPR.

Disclosure of Data

Data collected by us is generally only disclosed

• if you have given your express consent to such disclosure in accordance with Article 6 Paragraph 1 Sentence 1 (a) of the GDPR.
• if disclosure is necessary pursuant to Article 6 Paragraph 1 Sentence 1 (f) of the GDPR for the purpose of asserting, exercising or defending legal claims and there are no grounds for assuming that you have an overriding protection-worthy interest in your data remaining undisclosed.
• if we have a statutory duty to disclose pursuant to Article 6 Paragraph 1 Sentence 1 (c) of the GDPR or
• if it is legally permissible and is necessary pursuant to Article 6 Paragraph 1 Sentence 1 (b) of the GDPR for the performance of contractual relationships with you or for the performance of pre-contractual measures conducted on your request.

The data processing may be partially done by our service providers. Besides the service providers mentioned in this privacy policy notice, these may include in particular computer centres where our website and databases are stored, IT service providers who service and maintain our systems, as well as consultancy businesses. Where we do disclose data to our service providers, such data may be used by them solely for the purpose of performing their duties. The service providers are carefully selected and commissioned by us. They have a contractual obligation to comply with our directions, have appropriate technical and organisational measures in place to protect the rights of the persons concerned, and are regularly audited by us. In the event of collaboration with any service providers, a corresponding agreement is concluded with them covering the protection and security of data. A list of the names of the current service providers can be obtained in response to an inquiry/request sent to our email address gdpr@l-shop-team.eu or submitted in writing.

Disclosure may also take place in connection with requests from official bodies, court orders and legal actions or proceedings, e.g. in the context of investigations by the police or public prosecution departments as referred to in § 14 Para. 2 of the German Telemedia Act (“TMG”) if necessary for purposes of prosecution or enforcement of the law.

8. Duration of Storage

We generally store personal data only for as long as is necessary for fulfilment of the contractual and/or statutory duties for the purpose of which we collected the data. We then delete the data immediately except where it is needed until expiry of the statutory limitation for evidentiary purposes in connection with civil law claims or on account of statutory preservation requirements.

For evidentiary purposes, we must preserve contract data for a further three years from the end of the year in which the business relationship with you ends. Under the regular statutory limitation period, any claims will lapse at this time at the earliest.

In some cases, we may have to store your data for accounting reasons even longer. We are required to do so on the strength of documentation duties which may arise under the German Commercial Code (“Handelsgesetzbuch”), the German Fiscal Code (“Abgabenordnung”), the German Banking Act (“Kreditwesengesetz”), the German Money Laundering Act (“Geldwäschegesetz”) and the German Securities Trading Act (“Wertpapierhandelsgesetz”). In these cases, the periods specified for the preservation of records range from two to ten years.

9. Contact Options and Your Rights

You have the right to request information at any time concerning your personal data. In this case, we will explain the data processing procedure and provide you with an overview of the data stored in relation to you. If data stored by us are incorrect or out of data, you have the right to have such data corrected. You may also request the erasure of your data. Erasure (i.e. deletion) of your data is generally only possible if certain requirements are fulfilled / if data are no longer required, if processing is unlawful, or if other circumstances as provided for in Article 17 of the GDPR exist. If, in exceptional cases, erasure should not be possible on account of other legal regulations, the data will – provided the necessary requirements are fulfilled – be made generally inaccessible to other users and otherwise be kept available only for the specific legal purpose concerned. You may also cause the processing of your data to be restricted, if, for example, you raise doubts concerning the accuracy of the data. You also have the right, in certain cases, to data portability, i.e. we will furnish you on request with a digital copy of the personal data provided by you. You have the right to request information at any time concerning your personal data. In this case, we will explain the data processing procedure and provide you with an overview of the data stored in relation to you. If data stored by us are incorrect or out of data, you have the right to have such data corrected. You may also request the erasure of your data. Erasure (i.e. deletion) of your data is generally only possible if certain requirements are fulfilled / if data are no longer required, if processing is unlawful, or if other circumstances as provided for in Article 17 of the GDPR exist. If, in exceptional cases, erasure should not be possible on account of other legal regulations, the data will – provided the necessary requirements are fulfilled – be made generally inaccessible to other users and otherwise be kept available only for the specific legal purpose concerned. You may also cause the processing of your data to be restricted, if, for example, you raise doubts concerning the accuracy of the data. You also have the right, in certain cases, to data portability, i.e. we will furnish you on request with a digital copy of the personal data provided by you.

n order to assert your rights as described in this notice, you may contact us using the contact details indicated above at any time. This also applies if you wish to receive copies of guarantees as proof of an appropriate level of data protection.

Your inquiries/requests for the purpose of asserting data protection rights and our responses to them will be preserved for documentation purposes for a period of three years, and in individual cases also for longer periods for the purpose of asserting, exercising or defending legal claims. The legal basis for this is Article 6 Paragraph 1 (f) of the GDPR, based on our interest pursuant to Article 82 of the GDPR in defending civil law claims, our interest pursuant to Article 83 of the GDPR in avoiding fines, and our interest in fulfilment of our accountability duties pursuant to Article 5 of the GDPR.

Finally, you have the right to complain to the data protection supervisory authority with jurisdiction for us. You can exercise this right at a supervisory authority in the member country where your place of residence or your place of work is located or where the alleged violation occurred. In Dortmund, the domicile of L-SHOP-TEAM GmbH, the responsible supervisory authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf.

Valid: 08/2020