Data protection
Data Protection Statement
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide this has no consequences. This only applies if no other information is provided in subsequent processing.
“Personal data” means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without leaving any personal information.
Every time you visit our website, usage data is sent to us or our web host/IT service provider via your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page visited, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing takes place on the basis of Article 6 (1) (f) GDPR based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our offering.
Your data will be sent to Canada, among others. There is an adequacy decision from the European Commission for data transfers to Canada.
Responsible Contact Person
Please contact us if desired. The person responsible for data processing is: Frischebox GmbH, Gewerbering 38, 76287 Rheinstetten Germany, info@red-rhino.nl.
Specific customer contact via email
If you contact us for business purposes via e-mail, we collect data. We only use your personal data (name, e-mail address, message text) to the extent that it has been provided by you. The data processing serves to process and respond to your contact request.
If the contact is used to carry out pre-contractual measures (e.g. advice on purchasing interest, preparing a quotation) or relates to a contract that has already been concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR.
If contact is made for other reasons, this data processing will take place on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6(1)(f) of the GDPR.
We only use your email address to process your request. Your data will then be deleted in accordance with the legal retention periods, unless you have given permission for further processing and use.
Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent you have provided it. The purpose of data processing is to establish contact.
If the contact is used to carry out pre-contractual measures (e.g. advice on purchasing interest, preparing a quotation) or relates to a contract that has already been concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR.
If contact is made for other reasons, this data processing will take place on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6(1)(f) of the GDPR.
We only use your email address to process your request. Your data will then be deleted in accordance with the legal retention periods, unless you have given permission for further processing and use.
Customer Account Orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. The processing takes place with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal. Your customer account will then be deleted.
Collection, processing and transfer of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to process your queries. Providing the data is necessary for concluding the contract. If you do not provide this, no agreement will be concluded. The processing takes place on the basis of Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.
For example, your data will be passed on to your chosen shipping companies and dropshipping providers, payment service providers, order processing service providers and IT service providers. In all cases we strictly adhere to the legal requirements. The amount of data transmission is kept to a minimum.
Your data will be sent to Canada, among others. There is an adequacy decision from the European Commission for data transfers to Canada.
Reviews Advertisements
Data collection when writing a response or review
When commenting/rating an article or message, we only collect your personal data (name, email address, comment text) to the extent you have provided it. The purpose of the processing is to enable comments/reviews and to display comments/reviews.
By posting a comment/review you consent to the processing of the data sent. The processing takes place with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal. Your personal data will then be deleted.
When your comment/review is published, the name and email address you provide will be published.
Customer review Shopauskunft
For our website we use the assessment tool “shopauskunft.de” from Gewerbebund Management AG (Kohlgartenstrasse 11 – 13, 04315 Leipzig; “Shopauskunft”).
After placing your order, we would like to ask you to rate and comment on your purchase with us. For this purpose, we will write to you by e-mail, using the technical system “Legally Secure Valuation Request (RBA)”. We process the data about your order (order number/invoice number, purchase value and shipping costs) and your email address. We may also use this information to verify your review.
The processing takes place on the basis of Article 6 (1) (a) GDPR, with your consent, provided that you have expressly agreed to the transfer of your data and to receiving the request for evaluation.
You can withdraw your consent at any time via the relevant link in the email or by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal of it.
You can find more information about data protection when using Shopauskunft at:
https://www.shopauskunft.de/datenschutz .
Store information widget
The store information widget is integrated into our website. This aims to display the number and results of reviews we have received so far through store information and therefore advertisements.
In order to display the widget, it is technically necessary to transmit usage data via your Internet browser to the Shop Information server and store it in log data (so-called server log files) for 7 days. This stored data includes the name and URL of the file opened, the date and time of access, the IP address of the requesting computer, the website from which the access is made (referrer URL), the browser used and, if applicable, your operating system computer and the name of your access provider.
The processing takes place on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in promoting our offers by displaying the customer reviews we have already received. This data is not stored together with other personal data.
Use of your personal information to send you postal advertising
We use your personal data (name, address), which we have received in the context of the sale of a good or service, to send you postal advertising, unless you have objected to this use. Providing this data is necessary for concluding the contract. If you do not provide this, no agreement will be concluded.
The processing takes place on the basis of Article 6 (1) (f) GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by informing us. The contact details for exercising your objection can be found in the legal notice.
Use of the email address to send newsletters
Regardless of the contract processing, we use your e-mail address exclusively for our own advertising purposes for sending newsletters, provided that you have expressly consented to this. The processing takes place with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal. You can unsubscribe from the newsletter at any time via the relevant link in the newsletter or by informing us. Your email address will then be removed from the distribution list.
Use of Mailchimp
We use the service of Rocket Science Group LLC (675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA; “Mailchimp”) to send newsletters as part of order processing.
We pass on the information you provided when you registered for the newsletter (email address, first and last name if applicable) to Mailchimp. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
To evaluate newsletter campaigns, the sent newsletters contain a 1×1 pixel image (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device, as well as the time. Usage profiles can be created from this data under a pseudonym. The data collected is not used to identify you personally. The data collected is only used for statistical evaluation to improve newsletter campaigns.
Your data is usually sent to Mailchimp’s servers in the US and stored there. The European Commission has an adequacy decision for the US, the Trans-Atlantic Data Privacy Framework (TADPF). Mailchimp has certified itself under the TADPF and is therefore required to comply with European data protection principles.
Your personal data is processed on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, advertising-effective and user-friendly newsletter system. You have the right to object to this processing of personal data concerning you at any time, on grounds relating to your particular situation.
Further information and MailChimp’s data protection declaration can be found at: https://mailchimp.com/de/legal/data-processing-addendum/ and https://www.intuit.com/privacy/statement/ .
Shipping service provider Goods management
Providing the email address to shipping companies for shipping status information
. As part of the contract processing, we will pass on your e-mail address to the transport company, provided that you have expressly consented to this during the ordering process. The purpose of the transfer is to inform you by email about the shipping status. The processing takes place with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
Use of an external goods management system
We use a merchandise management system to process the contract as part of order fulfillment. For this purpose, your personal data collected in the context of the order will be sent to
office+ passed on.
Cookies
Our site uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. Therefore, you have complete control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually whether to accept them and prevent the storage of the cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that in this case you may not be able to fully use all functions of this website.
How to manage cookies in the major browsers (including disabling them) can be found via the links below:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lb6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablassen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless stated otherwise in the data protection declaration below, we only use these technically necessary cookies to make our offering more user-friendly, effective and secure. Cookies also enable our systems to recognize your browser, even after you change pages, and to provide you with services. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after a page change.
The use of cookies or similar technologies is based on Article 25(2) TTDSG. Your personal data is processed on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring optimal functionality of the website and a user-friendly and effective design of our offering.
You have the right to object to this processing of personal data concerning you at any time, on grounds relating to your particular situation.
Use of Google Analytics 4
On our website we use the web analysis service Google Analytics from Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The data processing serves the analysis of this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator to offer.
The following information may be collected, among other things: IP address, date and time of page visit, click path, information about the browser you use and the device you use, pages visited, referrer URL (website through which you visit our website) . website), location data, purchasing activities. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other data from Google.
Google uses technologies such as cookies, web storage in the browser and web beacons that enable analysis of your use of the website.
The information thus generated about your use of this website is usually transmitted to a Google server in the USA and stored there. The European Commission has an adequacy decision for the US, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore obliged to comply with the European data protection principles. Both Google and US government agencies have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google has about you.
When using Google Analytics 4, the IP address transmitted by your website is automatically collected and processed in an anonymized form. The IP address will previously be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
The use of cookies or similar technologies takes place with your consent on the basis of Article 25 paragraph 1 sentence 1 TTDSG in conjunction with Article 6 paragraph 1 letter a GDPR. The processing of your personal data takes place with your consent on the basis of Article 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
More information about the terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.
Plug-ins and others
Using the Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This application manages JavaScript tags and HTML tags, which are used in particular to implement tracking and analysis tools. The purpose of data processing is to tailor and optimize our website.
The Google Tag Manager itself does not store cookies and does not process personal data. However, it does allow the activation of additional tags that can collect and process personal data.
More information about the terms of use and data protection can be found here.
Use of social plugins
We use social network plug-ins on our website. The purpose of the integration of social plug-ins and the data processing that takes place is to optimize the advertising of our products.
When social plug-ins are integrated, a link is established between your computer and the servers of the social network providers and the plug-in is displayed on the page by informing your browser, provided that you have expressly consented to this agreed. Both your IP address and the information about which of our pages you have visited are sent to the provider’s servers. This applies regardless of whether you are registered or logged in to the social network. A transmission also takes place if users are not registered or logged in. If you are connected to one or more of your social network accounts at the same time, the information collected may also be assigned to your corresponding profiles. When you use the plug-in functions (e.g. by clicking the button), this data is also assigned to your user account. You can prevent this linking by logging out of your social media accounts before visiting our website and before activating the buttons.
The use of cookies or similar technologies takes place with your consent on the basis of Article 25 paragraph 1 sentence 1 TTDSG in conjunction with Article 6 paragraph 1 letter a GDPR. The processing of your personal data takes place with your consent on the basis of Article 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
The social networks listed below are integrated into our website using social plug-ins. More information about the scope and purpose of the collection and use of the data, as well as your rights in this regard and options for protecting your privacy, can be found in the linked data protection information of the providers.
Facebook from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for collecting your data when the service is integrated and transferring this data to Facebook. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which sets out the respective responsibilities. The agreement can be found at https://www.facebook.com/legal/controller_addendumopraagbaar. Thereafter, we are in particular responsible for fulfilling the information obligations in accordance with Articles 13 and 14 GDPR, for complying with the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33, 34 GDPR, to the extent that a personal data breach affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling the rights of data subjects in accordance with Articles 15 – 20 of the GDPR, for meeting the security requirements of Article 32 of the GDPR regarding the security of the service and for compliance with the obligations under Articles 33 and 34 GDPR in the event of a violation of the protection of personal data concerns the obligations of Meta Platforms Ireland under the Joint Processing Agreement.
Your data may be transferred to the USA. The European Commission has an adequacy decision for the US, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles.
More information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy, can be found in Facebook’s data protection information at https://www.facebook.com/about/privacy/.
Instagram from Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388
Your data may be transferred to the USA. The European Commission has an adequacy decision for the US, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles.
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The purpose of data processing is to uniformly display the fonts on our website. To load the fonts, a connection to Google’s servers is established when the page is called up. Cookies can be used here. Your IP address and information about the browser you use are processed and sent to Google, among other things. This data is not linked to your Google account.
Your data may be transferred to the USA. The European Commission has an adequacy decision for the US, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore obliged to comply with the European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Article 25 paragraph 1 sentence 1 TTDSG in conjunction with Article 6 paragraph 1 letter a GDPR. The processing of your personal data takes place with your consent on the basis of Article 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
More information about data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Rights of the data subjects and retention period
Duration of storage
After the contract has been completed, the data will initially be stored for the duration of the warranty period, then subject to statutory retention periods, in particular in the areas of tax and commercial law, and then deleted after the expiry of the period , unless you have given permission for further processing and use.
Rights of the data subject
You are entitled to the following rights under Articles 15 to 20 GDPR if the legal requirements are met: right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, according to Article 21 (1) GDPR, you have the right to object to processing based on Article 6 (1) f GDPR as well as to processing for the purpose of direct advertising.
Right to lodge a complaint with the supervisory authority
In accordance with Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is not being lawfully processed.
You can, among other things, lodge a complaint with the supervisory authority responsible for us, which you can reach via the following contact details:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Tel.: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de
Right to object
The processing of personal data mentioned here is based on our legitimate grounds. In accordance with Article 6(1)(f) GDPR, you have the right to object to this processing at any time with future effect on grounds arising from your particular situation.
After an objection has been made, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is intended to assert, exercise or exercise legal claims. to defend.
If personal data is processed for direct advertising purposes, you can object to this processing at any time by informing us. After an objection has been raised, we will stop processing the data in question for the purpose of direct advertising.
last updated: July 13, 2023