Data Pro­tec­tion Dec­la­ra­tion

1) Infor­ma­tion on the Col­lec­tion of Per­son­al Data and Con­tact Details of the Con­troller

1.1 We are pleased that you are vis­it­ing our web­site and thank you for your inter­est. On the fol­low­ing pages, we inform you about the han­dling of your per­son­al data when using our web­site. Per­son­al data is all data with which you can be per­son­al­ly iden­ti­fied.

1.2 The con­troller in charge of data pro­cess­ing on this web­site, with­in the mean­ing of the Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR), is Sebas­t­ian Zwick­er, watts and grams, Guten­bergstrasse 42, 24118 Kiel, Ger­many, Phone.: ‭+49 162 8207677‬, e‑mail: hello@wattsandgrams.de. The con­troller in charge of the pro­cess­ing of per­son­al data is the nat­ur­al or legal per­son who alone or joint­ly with oth­ers deter­mines the pur­pos­es and means of the pro­cess­ing of per­son­al data.

2) Data Col­lec­tion When You Vis­it Our Web­site

2.1 When using our web­site for infor­ma­tion only, i.e. if you do not reg­is­ter or oth­er­wise pro­vide us with infor­ma­tion, we only col­lect data that your brows­er trans­mits to our serv­er (so-called “serv­er log files”). When you vis­it our web­site, we col­lect the fol­low­ing data that is tech­ni­cal­ly nec­es­sary for us to dis­play the web­site to you:

• Our vis­it­ed web­site
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Brows­er used
• Oper­at­ing sys­tem used
• IP address used (if applic­a­ble: in anonymized form)

Data pro­cess­ing is car­ried out in accor­dance with Art. 6 (1) point f GDPR on the basis of our legit­i­mate inter­est in improv­ing the sta­bil­i­ty and func­tion­al­i­ty of our web­site. The data will not be passed on or used in any oth­er way. How­ev­er, we reserve the right to check the serv­er log files sub­se­quent­ly, if there are any con­crete indi­ca­tions of ille­gal use.

2.2 This web­site uses SSL or TLS encryp­tion for secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of per­son­al data and oth­er con­fi­den­tial con­tent (e.g. orders or inquiries to the con­troller). You can rec­og­nize an encrypt­ed con­nec­tion by the char­ac­ter string https:// and the lock sym­bol in your brows­er line.

3) Host­ing & Con­tent Deliv­ery Net­work

For the host­ing of our web­site and the pre­sen­ta­tion of the page con­tent, we use a provider that pro­vides its ser­vices itself or through select­ed sub­con­trac­tors exclu­sive­ly on servers with­in the Euro­pean Union.

All data col­lect­ed on our web­site is processed on these servers.

We have con­clud­ed an order pro­cess­ing con­tract with the provider, which ensures the pro­tec­tion of the data of our web­site vis­i­tors and pro­hibits unau­tho­rised dis­clo­sure to third par­ties.

4) Cook­ies

In order to make your vis­it to our web­site more attrac­tive and to enable the use of cer­tain func­tions, we use cook­ies, i.e. small text files that are stored on your end device. In some cas­es, these cook­ies are auto­mat­i­cal­ly delet­ed again after the brows­er is closed (so-called “ses­sion cook­ies”), in oth­er cas­es, these cook­ies remain on your end device for longer and allow page set­tings to be saved (so-called “per­sis­tent cook­ies”). In the lat­ter case, you can find the dura­tion of the stor­age in the overview of the cook­ie set­tings of your web brows­er.

If per­son­al data is also processed by indi­vid­ual cook­ies set by us, the pro­cess­ing is car­ried out either in accor­dance with Art. 6 (1) point b GDPR for the per­for­mance of the con­tract, in accor­dance with Art. 6 (1) point a GDPR in the case of con­sent giv­en or in accor­dance with Art. 6 (1) point f GDPR to safe­guard our legit­i­mate inter­ests in the best pos­si­ble func­tion­al­i­ty of the web­site as well as a cus­tomer-friend­ly and effec­tive design of the page vis­it.

You can set your brows­er in such a way that you are informed about the set­ting of cook­ies and you can decide indi­vid­u­al­ly about their accep­tance or exclude the accep­tance of cook­ies for cer­tain cas­es or in gen­er­al.

Please note that the func­tion­al­i­ty of our web­site may be lim­it­ed if cook­ies are not accept­ed.

5) Con­tact­ing Us

When you con­tact us (e.g. via con­tact form or e‑mail), per­son­al data is col­lect­ed. Which data is col­lect­ed in the case of a con­tact form can be seen from the respec­tive con­tact form. This data is stored and used exclu­sive­ly for the pur­pose of respond­ing to your request or for estab­lish­ing con­tact and for the asso­ci­at­ed tech­ni­cal admin­is­tra­tion.

The legal basis for pro­cess­ing data is our legit­i­mate inter­est in respond­ing to your request in accor­dance with Art. 6 (1) point f GDPR. If your con­tact is aimed at con­clud­ing a con­tract, the addi­tion­al legal basis for the pro­cess­ing is Art. 6 (1) point b GDPR. Your data will be delet­ed after final pro­cess­ing of your enquiry; this is the case if it can be inferred from the cir­cum­stances that the facts in ques­tion have been final­ly clar­i­fied, pro­vid­ed there are no legal stor­age oblig­a­tions to the con­trary.

6) Pro­cess­ing of Data for the Pur­pose of Order Han­dling

6.1 Inso­far as nec­es­sary for the pro­cess­ing of the con­tract for deliv­ery and pay­ment pur­pos­es, the per­son­al data col­lect­ed by us will be passed on to the com­mis­sioned trans­port com­pa­ny and the com­mis­sioned cred­it insti­tu­tion in accor­dance with Art. 6 Para. 1 lit. b GDPR.

If we owe you updates for goods with dig­i­tal ele­ments or for dig­i­tal prod­ucts on the basis of a cor­re­spond­ing con­tract, we will process the con­tact data (name, address, e‑mail address) pro­vid­ed by you when plac­ing the order in order to inform you per­son­al­ly by suit­able means of com­mu­ni­ca­tion (e.g. by post or e‑mail) about upcom­ing updates with­in the legal­ly stip­u­lat­ed peri­od of time with­in the frame­work of our statu­to­ry duty to inform pur­suant to Art. 6 Para. 1 lit. c GDPR. Your con­tact details will be used strict­ly for the pur­pose of inform­ing you about updates owed by us and will only be processed by us for this pur­pose to the extent that this is nec­es­sary for the respec­tive infor­ma­tion.

In order to process your order, we also work togeth­er with the fol­low­ing ser­vice provider(s), who sup­port us in whole or in part in the exe­cu­tion of con­clud­ed con­tracts. Cer­tain per­son­al data is trans­ferred to these ser­vice providers in accor­dance with the fol­low­ing infor­ma­tion.

6.2 Pass­ing on Per­son­al Data to Ship­ping Ser­vice Providers

Deutsche Post

We use the fol­low­ing provider as trans­port ser­vice provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Ger­many

We pass on your e‑mail address and/or tele­phone num­ber to the provider in accor­dance with Art. 6 (1) point a GDPR pri­or to deliv­ery of the goods for the pur­pose of coor­di­nat­ing a deliv­ery date or for deliv­ery noti­fi­ca­tion, if you have giv­en your express con­sent in the order­ing process. Oth­er­wise, we will only pass on the name of the recip­i­ent and the deliv­ery address to the sup­pli­er for the pur­pose of deliv­ery in accor­dance with Art. 6 (1) point b GDPR. The trans­mis­sion only takes place to the extent nec­es­sary for the deliv­ery of the goods. In this case, pri­or coor­di­na­tion of the deliv­ery date with the sup­pli­er or the deliv­ery announce­ment is not pos­si­ble.

The con­sent can be revoked at any time with effect for the future vis-à-vis the respon­si­ble per­son named above or vis-à-vis the provider.

DHL

We use the fol­low­ing provider as trans­port ser­vice provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Ger­many

We pass on your e‑mail address and/or tele­phone num­ber to the provider in accor­dance with Art. 6 (1) point a GDPR pri­or to deliv­ery of the goods for the pur­pose of coor­di­nat­ing a deliv­ery date or for deliv­ery noti­fi­ca­tion, if you have giv­en your express con­sent in the order­ing process. Oth­er­wise, we will only pass on the name of the recip­i­ent and the deliv­ery address to the sup­pli­er for the pur­pose of deliv­ery in accor­dance with Art. 6 (1) point b GDPR. The trans­mis­sion only takes place to the extent nec­es­sary for the deliv­ery of the goods. In this case, pri­or coor­di­na­tion of the deliv­ery date with the sup­pli­er or the deliv­ery announce­ment is not pos­si­ble.

The con­sent can be revoked at any time with effect for the future vis-à-vis the respon­si­ble per­son named above or vis-à-vis the provider.

6.3 Use of Pay­ment Ser­vice Providers

Apple Pay

If you choose the pay­ment method “Apple Pay” of Apple Dis­tri­b­u­tion Inter­na­tion­al (Apple), Hol­ly­hill Indus­tri­al Estate, Hol­ly­hill, Cork, Ire­land, the pay­ment pro­cess­ing is car­ried out via the “Apple Pay” func­tion of your ter­mi­nal device oper­at­ed with iOS, watchOS or macOS by deb­it­ing a pay­ment card deposit­ed with “Apple Pay”. Apple Pay uses secu­ri­ty fea­tures built into the hard­ware and soft­ware of your device to pro­tect your trans­ac­tions. In order to release a pay­ment, it is there­fore nec­es­sary to enter a code pre­vi­ous­ly defined by you and to ver­i­fy it using the “Face ID” or “Touch ID” func­tion of your ter­mi­nal.
For the pur­pose of pay­ment pro­cess­ing, your infor­ma­tion pro­vid­ed dur­ing the order­ing process, along with infor­ma­tion about your order, will be trans­mit­ted to Apple in encrypt­ed form. Apple then encrypts this data again with a devel­op­er-spe­cif­ic key before the data is trans­mit­ted to the pay­ment ser­vice provider of the pay­ment card stored in Apple Pay for pay­ment pro­cess­ing. The encryp­tion ensures that only the web­site from which the pur­chase was made can access the pay­ment infor­ma­tion. After the pay­ment is made, Apple sends your device account num­ber and a trans­ac­tion-spe­cif­ic dynam­ic secu­ri­ty code to the orig­i­nat­ing web­site to con­firm the pay­ment.
If per­son­al data is processed in the described trans­mis­sions, the pro­cess­ing is car­ried out exclu­sive­ly for the pur­pose of pay­ment pro­cess­ing in accor­dance with Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymised trans­ac­tion data, includ­ing the approx­i­mate amount of the pur­chase, the approx­i­mate date and time and whether the trans­ac­tion was com­plet­ed suc­cess­ful­ly. Anonymi­sa­tion com­plete­ly excludes any per­son­al ref­er­ence. Apple uses the anonymised data to improve Apple Pay and oth­er Apple prod­ucts and ser­vices.
When you use Apple Pay on iPhone or the Apple Watch to com­plete a pur­chase made through Safari on Mac, the Mac and the autho­riza­tion device com­mu­ni­cate through an encrypt­ed chan­nel on Apple’s servers. Apple does not process or store this infor­ma­tion in any for­mat that can iden­ti­fy you per­son­al­ly. You can dis­able the abil­i­ty to use Apple Pay on your Mac in your iPhone pref­er­ences. Go to “Wal­let & Apple Pay” and dis­able “Allow pay­ments on Mac”.
For more infor­ma­tion about Apple Pay pri­va­cy, please vis­it the fol­low­ing web address: https://support.apple.com/en-gb/HT203027

Mol­lie

Online pay­ment meth­ods from the fol­low­ing provider are avail­able on this web­site: Mol­lie B.V., Keiz­ers­gracht 313, 1016 EE Ams­ter­dam, Nether­lands

If you select a pay­ment method of the provider for which you make an advance pay­ment (e.g. cred­it card pay­ment), your pay­ment data pro­vid­ed dur­ing the order­ing process (includ­ing name, address, bank and pay­ment card infor­ma­tion, cur­ren­cy and trans­ac­tion num­ber) as well as infor­ma­tion about the con­tent of your order will be passed on to the provider in accor­dance with Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the pur­pose of pro­cess­ing pay­ment with the provider and only to the extent nec­es­sary for this pur­pose.

Pay­pal

Online pay­ment meth­ods from the fol­low­ing provider are avail­able on this web­site: Pay­Pal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boule­vard Roy­al, L‑2449 Lux­em­bourg

If you select a pay­ment method of the provider for which you make an advance pay­ment, your pay­ment data pro­vid­ed dur­ing the order­ing process (includ­ing name, address, bank and pay­ment card infor­ma­tion, cur­ren­cy and trans­ac­tion num­ber) as well as infor­ma­tion about the con­tent of your order will be passed on to the provider in accor­dance with Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the pur­pose of pro­cess­ing pay­ment with the provider and only to the extent nec­es­sary for this pur­pose.

When select­ing a pay­ment method of the provider with which the provider makes advance pay­ments, you will also be asked to pro­vide cer­tain per­son­al data (first name and sur­name, street, house num­ber, post­code, city, date of birth, e‑mail address, tele­phone num­ber, if applic­a­ble data on alter­na­tive means of pay­ment) dur­ing the order­ing process.

In order to safe­guard our legit­i­mate inter­est in deter­min­ing the sol­ven­cy of our cus­tomers, this data is passed on to the provider by us for the pur­pose of a cred­it check in accor­dance with Art. 6 (1) point f GDPR. On the basis of the per­son­al data pro­vid­ed by you as well as fur­ther data (such as shop­ping cart, invoice total, order his­to­ry, pay­ment his­to­ry), the provider checks whether the pay­ment option select­ed by you can be grant­ed with regard to pay­ment and/or bad debt risks.

The cred­it report may con­tain prob­a­bil­i­ty val­ues (so-called score val­ues). Inso­far as score val­ues are includ­ed in the result of the cred­it report, they have their basis in a sci­en­tif­i­cal­ly recog­nised math­e­mat­i­cal-sta­tis­ti­cal pro­ce­dure. The cal­cu­la­tion of the score val­ues includes, but is not lim­it­ed to, address data.

You can object to this pro­cess­ing of your data at any time by send­ing a mes­sage to us or to the provider. How­ev­er, the provider may still be enti­tled to process your per­son­al data if this is nec­es­sary for the con­trac­tu­al pro­cess­ing of pay­ments.

7) Rights of the Data Sub­ject

7.1 The applic­a­ble data pro­tec­tion law grants you the fol­low­ing com­pre­hen­sive rights of data sub­jects (rights of infor­ma­tion and inter­ven­tion) vis-à-vis the data con­troller with regard to the pro­cess­ing of your per­son­al data:

• Right of access by the data sub­ject pur­suant to Art. 15 GDPR;
• Right to rec­ti­fi­ca­tion pur­suant to Art. 16 GDPR;
• Right to era­sure (“right to be for­got­ten”) pur­suant to Art. 17 GDPR;
• Right to restric­tion of pro­cess­ing pur­suant to Art. 18 GDPR;
• Right to be informed pur­suant to Art. 19 GDPR;
• Right to data porta­bil­i­ty pur­suant to Art. 20 GDPR;
• Right to with­draw a giv­en con­sent pur­suant to Art. 7 (3) GDPR;
• Right to lodge a com­plaint pur­suant to Art. 77 GDPR.

7.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

8) Dura­tion of Stor­age of Per­son­al Data

The dura­tion of the stor­age of per­son­al data is based on the respec­tive legal basis, the pur­pose of pro­cess­ing and – if rel­e­vant – on the respec­tive legal reten­tion peri­od (e.g. com­mer­cial and tax reten­tion peri­ods).

If per­son­al data is processed on the basis of express con­sent pur­suant to Art. 6 (1) point a GDPR, this data is stored until the data sub­ject revokes his con­sent.

If there are legal stor­age peri­ods for data that is processed with­in the frame­work of legal or sim­i­lar oblig­a­tions on the basis of Art. 6 (1) point b GDPR, this data will be rou­tine­ly delet­ed after expiry of the stor­age peri­ods if it is no longer nec­es­sary for the ful­fill­ment of the con­tract or the ini­ti­a­tion of the con­tract and/or if we no longer have a jus­ti­fied inter­est in fur­ther stor­age.

When pro­cess­ing per­son­al data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data sub­ject exer­cis­es his right of objec­tion in accor­dance with Art. 21 (1) GDPR, unless we can pro­vide com­pelling grounds for pro­cess­ing wor­thy of pro­tec­tion which out­weigh the inter­ests, rights and free­doms of the data sub­ject, or the pro­cess­ing serves to assert, exer­cise or defend legal claims.

If per­son­al data is processed for the pur­pose of direct mar­ket­ing based on Art. 6 (1) point f GDPR, this data is stored until the data sub­ject exer­cis­es his right of objec­tion pur­suant to Art. 21 (2) GDPR.

Unless oth­er­wise stat­ed in the infor­ma­tion con­tained in this dec­la­ra­tion on spe­cif­ic pro­cess­ing sit­u­a­tions, stored per­son­al data will be delet­ed if it is no longer nec­es­sary for the pur­pos­es for which it was col­lect­ed or oth­er­wise processed.