Privacy Policy
1) Introduction and Contact Details of the Controller
1.1
We are pleased that you are visiting our website and appreciate your interest in our company and services. Below, we provide information on how your personal data is processed when using our website. Personal data refers to any information that can be used to personally identify you.
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
abel&käufl Mobilfunkhandels GmbH,
Alter Rennweg 179,
84034 Landshut,
Germany
Phone: +49 871 96215-510
Fax: +49 871 96215-880
Email: info@abel-kaeufl.de
The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, meaning if you do not register or otherwise transmit information to us, we only collect data that your browser automatically transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary to display the website properly and ensure its stability and security:
- Unsere besuchte Website
- Visited Website
- Date and Time of Access
- Referrer URL
- Browser Used
- Operating System Used
- IP Address Used (where applicable, in anonymized form)
The data is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in ensuring and improving the stability and functionality of our website. The data will not be disclosed to third parties or used for any other purposes. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries submitted to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol displayed in your browser’s address bar.
Hosting & Content-Delivery-Network
For the hosting of our website and the delivery of its content, we use a provider that performs its services either directly or through selected subcontractors exclusively on servers located within the European Union. All data collected on this website is processed on these servers.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit any unauthorized disclosure to third parties.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain stored on your device for a longer period and allow website settings to be saved (so-called “persistent cookies”). In the latter case, you can find details about the storage duration in your web browser’s cookie settings overview.
Where personal data is processed through individual cookies used by us, such processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of a contract, in accordance with Art. 6(1)(a) GDPR on the basis of your consent, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective website experience.
You can configure your browser settings to be informed about the use of cookies and decide individually on their acceptance, or to exclude the acceptance of cookies for specific cases or in general.
Please note that disabling cookies may limit the functionality of our website.
5) Contacting Us
When contacting us (e.g. via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your inquiry is related to the conclusion of a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once it can be determined from the circumstances that the matter in question has been conclusively resolved, provided that no statutory retention obligations apply.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide such data to us when opening a customer account. The data required for account registration can be found in the corresponding input form on our website.
You may request the deletion of your customer account at any time by sending a message to the controller using the contact details provided above. Following deletion of your customer account, your data will be deleted provided that all contracts concluded through the account have been fully completed, no statutory retention obligations apply and no legitimate interest in further storage continues to exist on our part.
7) Use of Customer Data for Direct Marketing
7.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our products, services and offers. The only mandatory information required for sending the newsletter is your email address. Providing additional information is voluntary and may be used to address you personally.
We use the so-called double opt-in procedure for newsletter registration. This means that you will only receive newsletters after you have expressly confirmed your consent by activating a verification link sent to the email address provided.
By activating the confirmation link, you consent to the processing of your personal data in accordance with Art. 6(1)(a) GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected during newsletter registration is used exclusively for the intended purpose.
You may unsubscribe from the newsletter at any time using the unsubscribe link provided in the newsletter or by contacting the controller specified above. After unsubscribing, your email address will be removed from our newsletter distribution list without undue delay unless you have expressly consented to further use of your data or we reserve the right to process data beyond this scope where legally permitted and disclosed in this privacy policy.
7.2 Sending the Email Newsletter to Existing Customers
If you have provided us with your email address in connection with the purchase of goods or services, we reserve the right to regularly send you offers by email for similar goods or services from our portfolio. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), no separate consent is required for this purpose.
In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing pursuant to Art. 6(1)(f) GDPR. If you have objected to the use of your email address for this purpose from the outset, we will not send you any marketing emails.
You may object to the use of your email address for the aforementioned advertising purposes at any time with effect for the future by contacting the controller specified above. You will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will cease immediately.
7.3 HubSpot
Our email newsletters are sent via HubSpot Ireland Ltd., 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland.
Based on our legitimate interest in effective and user-friendly newsletter marketing pursuant to Art. 6(1)(f) GDPR, we transfer the data provided during newsletter registration to this provider so that newsletters can be sent on our behalf.
Subject to your explicit consent pursuant to Art. 6(1)(a) GDPR, the provider also performs statistical analyses of newsletter campaigns using web beacons or tracking pixels integrated into the emails. These technologies may measure open rates and specific interactions with newsletter content. Device-related information (e.g. access time, IP address, browser type and operating system) may also be collected and analyzed but will not be combined with other datasets.
You may revoke your consent to newsletter tracking at any time with effect for the future.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit any unauthorized disclosure to third parties.
8) Data Processing for Order Processing
8.1 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be transferred to the commissioned transport company and the commissioned financial institution in accordance with Art. 6(1)(b) GDPR.
If, based on a corresponding contract, we are obliged to provide updates for goods with digital elements or for digital products, we process the contact data you provided during the ordering process in order to personally inform you within the scope of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact data will be used exclusively for notifications regarding updates owed by us and will only be processed to the extent necessary for the respective communication.
For the processing of your order, we also cooperate with the following service providers who support us wholly or partially in the fulfillment of concluded contracts. Certain personal data is transferred to these service providers in accordance with the information below.
8.2 Use of Payment Service Providers (Payment Services)
– PayPal
This website offers one or more online payment methods provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
If you select a payment method requiring advance payment by the customer, the payment data provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information relating to your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. The transfer of your data takes place exclusively for the purpose of payment processing and only to the extent necessary for this purpose.
If you select a payment method involving advance performance by us, you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).
In such cases, to safeguard our legitimate interest in assessing your creditworthiness, this data will be transmitted to the provider for the purpose of a credit check pursuant to Art. 6(1)(f) GDPR. Based on the personal data provided by you and additional information (such as shopping cart contents, invoice amount, order history and payment experience), the provider assesses whether the selected payment method can be granted with regard to payment and default risks.
The credit assessment may contain probability values (so-called score values). Where score values are included in the credit assessment, they are based on scientifically recognized mathematical-statistical procedures. Address-related data may also be included in the calculation of score values.
You may object to this processing of your data at any time by contacting us or the provider. However, the provider may still be entitled to process your personal data where this is necessary for contractual payment processing.
– WooCommerce Payments
This website offers one or more online payment methods provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.
If you select a payment method requiring advance payment by the customer (e.g. credit card payment), the payment data provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information relating to your order will be transferred to the provider in accordance with Art. 6(1)(b) GDPR. Your data will only be transferred for the purpose of payment processing and only to the extent necessary for this purpose.
For transfers of personal data to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
9) Web Analytics Services
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables us to analyze the use of our website.
By default, Google Analytics 4 uses cookies when you visit this website. These cookies are stored as small text files on your device and collect certain information. This information also includes your IP address, which is shortened by Google before processing in order to exclude direct personal identification.
The information is transmitted to Google servers and further processed there. Transfers to Google LLC in the United States may also occur.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity and provide additional services related to website and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
The data collected through Google Analytics 4 is stored for a period of two months and subsequently deleted.
All processing activities described above, in particular the storage of cookies on the device used, are only carried out if you have given your explicit consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to this website. You may revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with Google to ensure the protection of our website visitors’ data and to prevent any unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 is available at:
Demographic Characteristics
Google Analytics 4 uses the “demographic characteristics” feature to generate statistics relating to the age, gender and interests of website visitors. This is achieved through the analysis of advertising data and information from third-party providers. As a result, target groups for marketing activities can be identified.
However, the collected data cannot be attributed to any specific individual and will be deleted after a storage period of two months.
Google Signals
As an extension of Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have enabled personalized advertising and linked your devices to your Google account, Google may — subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR — analyze your usage behavior across devices and create database models, including models relating to cross-device conversions.
We do not receive any personal data from Google, but only aggregated statistical information.
If you wish to disable cross-device analysis, you can deactivate the “Personalized Advertising” feature in your Google account settings. Please follow the instructions provided on the following page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Additional information about Google Signals is available at the following link: https://support.google.com/analytics/answer/7532985?hl=de
User IDs
As an extension of Google Analytics 4, this website may use the “User IDs” feature. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, created an account on this website and logged into this account across multiple devices, your activities, including conversions, may be analyzed across devices.
Collection of User-Provided Data
To improve analytics results for users whose contact information we have obtained in the context of business or business-related relationships, we use the “Collection of User-Provided Data” feature.
Subject to your explicit consent pursuant to Art. 6(1)(a) GDPR, we electronically transmit one or more files containing aggregated customer data relating to you (primarily email address and telephone number) to Google as part of this feature. Google does not receive access to plain-text data. Instead, the information contained in the customer files is automatically encrypted during the transmission process using a dedicated algorithm. The encrypted information may only be used by Google to match it with existing Google accounts created by the respective data subjects.
This processing is intended to improve the accuracy of measurement data, enhance cross-device user tracking and enable the integration of analytics data into Google Ads personalization and conversion tracking features.
You may revoke your consent at any time with effect for the future. Further information about Google’s data protection measures regarding the transmission of customer data is available at:
Google Support – Customer Match Policies
For transfers of personal data to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
10) Website Functionalities
10.1 YouTube
This website uses plugins for the display and playback of videos provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Personal data may also be transferred to Google LLC in the United States.
When you access a page on our website containing such a plugin, your browser establishes a direct connection to the provider’s servers no later than when video playback begins in order to load the content. During this process, certain information, including your IP address, is transmitted to the provider.
If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behavior, generate playback statistics and prevent abusive activities.
If you are logged into a user account with the provider during your visit to the website, your data will be directly associated with your account when you click on a video. If you do not wish this association to occur, you must log out of your account before activating the playback button.
All processing activities described above, in particular the storage of cookies on the device used, are only carried out if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by disabling this service via the “Cookie Consent Tool” provided on the website.
For transfers of personal data to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
10.2 HubSpot
For conducting surveys and providing online forms, we use the services of the following provider: HubSpot Ireland Ltd., 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland.
The provider enables us to create, manage and evaluate surveys and online forms. In addition to the personal data you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and IP address is collected, transmitted to the provider and stored on the provider’s servers.
The information you enter into the forms is stored in a password-protected environment to ensure that unauthorized access by third parties is prevented and that only we can evaluate the data for the purpose specified in the respective form.
Where the processing of personal data is necessary for the performance of a contract with you (this also applies to processing operations required for the implementation of pre-contractual measures), the legal basis is Art. 6(1)(b) GDPR. If you have given us your consent to process your data, processing is carried out on the basis of Art. 6(1)(a) GDPR. Any consent granted may be withdrawn at any time with effect for the future.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prevent any unauthorized disclosure to third parties.
10.3 Online Applications via a Form
On our website, we publish current job vacancies in a dedicated careers section. Interested applicants may apply for these positions using the corresponding online application form.
Applicants are required to provide all personal data necessary for a proper assessment of their application, including general information such as name, address and contact details, as well as qualification-related documents and, where applicable, health-related information. Further details regarding the application process can be found in the respective job posting.
When the application form is submitted, applicant data is transmitted to us in encrypted form in accordance with the current state of technology, stored securely and processed exclusively for the purpose of handling the application process. Processing is carried out on the basis of Art. 6(1)(b) GDPR (or Section 26(1) BDSG in Germany), according to which the application procedure is considered a pre-contractual employment measure.
Where special categories of personal data within the meaning of Art. 9(1) GDPR are requested during the application process (e.g. health-related data such as information regarding severe disability status), processing is carried out in accordance with Art. 9(2)(b) GDPR in order to enable us to exercise rights arising from employment law and social security and social protection law and to fulfill our related obligations.
Alternatively or additionally, the processing of special categories of personal data may also be based on Art. 9(2)(h) GDPR where such processing is necessary for purposes of preventive healthcare or occupational medicine, for assessing the applicant’s working capacity, for medical diagnostics, healthcare or treatment, or for the administration of healthcare or social care systems and services.
If an applicant is not selected or withdraws their application prematurely, the data submitted via the application form, as well as all related electronic correspondence including application emails, will be deleted no later than six months after notification. This retention period is based on our legitimate interest in responding to possible follow-up questions regarding the application and, where applicable, fulfilling legal obligations relating to equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6(1)(b) GDPR (in Germany in conjunction with Section 26(1) BDSG) for the purpose of establishing and carrying out the employment relationship.
10.4 Personio
For the administration, organization and processing of online applications, we use the applicant management software provided by Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany.
Based on our legitimate interest in efficient and user-friendly applicant management pursuant to Art. 6(1)(f) GDPR, the data submitted as part of your online application is transmitted to the provider in encrypted form, securely stored there and made available to us for the purpose of processing your application.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prevent any unauthorized disclosure to third parties.
11) Data Subject Rights
11.1 Applicable data protection law grants you the following rights as a data subject with regard to the processing of your personal data by the controller (rights of access and intervention), whereby reference is made to the legal basis cited for the respective requirements for exercising these rights:
- Right of Access pursuant to Art. 15 GDPR;
- Right to Rectification pursuant to Art. 16 GDPR;
- Right to Erasure pursuant to Art. 17 GDPR;
- Right to Restriction of Processing pursuant to Art. 18 GDPR;
- Right to Notification pursuant to Art. 19 GDPR;
- Right to Data Portability pursuant to Art. 20 GDPR;
- Right to Withdraw Granted Consent pursuant to Art. 7(3) GDPR;
- Right to Lodge a Complaint pursuant to Art. 77 GDPR.
11.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) Duration of Storage of Personal Data
The retention period for personal data is determined by the respective legal basis, the purpose of processing and — where applicable — by the applicable statutory retention periods (e.g. retention obligations under commercial and tax law).
Where personal data is processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, such data will be stored until you withdraw your consent.
Where statutory retention obligations apply to data processed within the framework of contractual or quasi-contractual obligations pursuant to Art. 6(1)(b) GDPR, such data will be routinely deleted after expiry of the applicable retention periods, provided that the data is no longer required for the performance or initiation of a contract and/or there is no legitimate interest in continued storage on our part.
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise stated in the other provisions of this privacy policy relating to specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
