Data privacy notice

1. General information about the collection of personal data
(1) In the following data privacy notice, we explain how we handle the personal data that is communicated to us when you use our websites and/or our services. “Personal data” means all information that relates to you as an individual, such as name, address, e-mail addresses, or user behaviour.

(2) Data controller in accordance with Art. 4(7) of the General Data Protection Regulation (GDPR):

Transhumanz.org
5 rue Alfred Kastler
F-54320 Maxéville

Managing Director: Laurent Moussier
Commercial register: 491 095 675 R.C.S Nancy
VAT registration number: FR15491095675

2. Rights of the data subject
(1) In your relationship with Transhumanz.org, you have the following rights with regard to the personal data relating to you:

  • Right of access (Art. 15 GDPR) to your personal data as processed by us.
  • Right to rectification (Art. 16 GDPR) or to complete personal data relating to you that is processed by us.
  • Right to erasure (Art. 17 GDPR) of personal data relating to you that is processed by us unless such processing is necessary in the exceptional circumstances outlined in Art. 17(3) GDPR.
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to notification (Art. 19 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to withdraw consent that has previously been given to us (Art. 7(3) GDPR). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • (2) Furthermore, you have the right to lodge a complaint with a data protection supervisory authority, if you believe that the processing of your personal data by us is unlawful. These authorities are the data protection commissioners for the respective German federal states. You will find the appropriate contacts listed, for example, on the following website: https://datenschutz.saarland.de/datenschutz/zustaendigkeiten/#c139.

    (3) Right to object to the processing of your personal data
    If we base the processing of your personal data on a balance of interests, you may object to this processing operation. This is the case when the processing operation is not specifically required to fulfil a contract with you, as outlined by us in the corresponding description of each operation. If you choose to exercise this right to object, we will ask you to give reasons why you do not wish us to process your personal data as we have done previously. If we receive a justified objection from you, we will examine the situation and either stop or adjust the data processing operation or alternatively present you with our compelling legitimate grounds for continuing our processing operation. Please use the following contact information to enquire about your right to object to marketing: e-mail: info@transhumanz.org
    3. Data security
    Because the security of your data is important to us, your personal data is transmitted via a secure SSL- or TLS-encryption system/connection. TLS (Transport Layer Security) and its predecessor SSL (Secure Sockets Layer) are protocols used to encrypt online data transmissions. We use these to protect your personal data against third-party access. When your browser bar shows “https//:” or the padlock symbol, you can see that the connection is encrypted.

    To provide additional security on our website and other systems, we have technical and organisational measures in place to protect your data from being lost, destroyed, accessed, modified, or distributed by unauthorised persons. However, despite regular inspections, it is not possible to guarantee complete protection against all risks.

    4. Visiting our website
    If you only use our website for information purposes—i.e. you do not register with us or otherwise provide us with information—we do NOT collect ANY personal data that your browser transmits to our server.

    5. Use of our online shop
    (1) When you wish to place an order in our online shop, you must provide personal data, such as: Name, Address and E-mail address, in the course of the ordering process. Which data is collected can be seen in each input screen, where mandatory entries are specially marked. All other information is voluntary. The submission of your personal data serves the purpose and is required to conclude the contract and to process your order. Our lawful basis for these processing operations is Art. 6(1) sentence 1(b) GDPR.

    (2) You have the option of creating a customer account. For the purpose of using your personal data for additional, subsequent orders, the data provided by you is revocably stored and processed. Our lawful basis for these processing operations is Art. 6(1) sentence 1(b) GDPR.

    (3) Under commercial and tax law we are required to store your address, payment, and order data for the duration of ten years. Your data will therefore not be completely deleted even when it is no longer necessary to save it for the concluded contract. Processing will, however, be limited to the degree necessary to comply with statutory obligations. In this case, our lawful basis for the processing operation is Art. 6(1) sentence 1(c) GDPR.

    (4) We will use the data that you provided to us in the course of your order exclusively for processing your order. We make use of the external service providers named below for processing the order.

    (a) Your address data must be forwarded to our parcel delivery service for the shipping of goods. They are obligated to treat your data as confidential and to save and use it exclusively for the purpose of delivery, and to delete it upon completion of the delivery. In this case, our lawful basis for the forwarding of data is Art. 6(1) sentence 1(b) GDPR.

    (b) We use the external payment service provider Natixis Paiements (SYSTEMPAY), on whose platform we and the users can conduct payment transactions. In the context of fulfilling contracts, we use this payment service provider on the basis of Art. 6 clause 1 (b) GDPR. We also use the external payment service provider on the basis of our justified interests pursuant to Art. 6 Clause 1 (f) GDPR, in order to offer our users effective and safe payment options.

    The data processed by the payment service provider include inventory data, such as name and address, bank details such as account numbers or credit card numbers, passwords, TANs and verification numbers, as well as sums, contractual details and recipient-related information. These data are necessary in order to conduct the transaction. However, the data provided is processed and stored only by the payment service provider. In other words, we do not receive any account or credit card-related information, but instead only information relating to the confirmation or rejection of a payment. In some circumstances, the data are forwarded by the payment service provider to credit agencies for the purpose of verifying identity and creditworthiness. On this point we refer to the general terms and conditions of the payment service provider, retrievable at: https://www.payments.natixis.com/legal-notice/. The privacy policy of Natixis Paiements can be found here: https://www.payments.natixis.com/data-protection/.
    The general terms and conditions and privacy policy of the payment service provider apply for payment transactions. These can be found on the relevant websites or transaction applications.

    (5) You can also pay for your order on account. We hereby inform you that when you select this method of payment we will evaluate the risk of default on the basis of statistical mathematical methods (scoring) from a credit agency[A1] . The personal data required for the credit check will also be sent to the credit agency, and your address data will also be considered. This data is collected, stored, and forwarded for the purpose of checking creditworthiness to avoid default. Our lawful basis for these processing operations is Art. 6(1) sentence 1(b) GDPR and Art. 6(1) sentence 1(f) GDPR. A statistical probability of credit default, and therefore your ability to pay, is calculated on the basis of this information. If the result of the credit check is positive, payment on account is possible. If the results of the credit check is negative, then our shop system will not offer you the option of payment on account.
    The decision as to whether payment on account is possible is based solely on an automated decision by our online shop system, performed by the credit agency engaged by us, so that no separate manual review of your documentation is performed by one of our employees.
    You can decline transmission of your data to the credit agency at any time. However, in this case it will no longer be possible to place orders on account through our website. Scoring [and the automated decision] is limited solely to whether an order on account can be placed. We use the score [and the automated decision of our shop system] solely to protect ourselves against potential payment defaults.
    In addition, we may transmit information to the credit agency about behaviour not related to receivables that undermines your trustworthiness (such as credit card fraud). This is done in accordance with legal requirements to the extent necessary to protect our justified interests and the justified interests of third parties, and there is no reason to assume that you have no prevailing interests or fundamental rights and liberties that require personal data protection. This data is collected, stored, and forwarded for the purpose of fraud prevention, and our lawful basis for these processing operations is Art. 6(1) sentence 1(f) GDPR.

    6. Contacting us by e-mail or using the contact form
    (1) When you contact us by e-mail or via the contact form on our website, we collect and store your personal data. The particular personal data collected if you contact us via the contact form is indicated on the form itself. When you contact us by e-mail, we collect and store the following personal data: e-mail address and text in the e-mail body in addition to any further data that is voluntarily provided.

    (2) We process the data you provide only in order to deal with your contact enquiry. Our lawful basis for these processing operations is Art. 6(1) sentence 1(b) GDPR and/or our legitimate interest in responding to your request as per Art. 6(1) sentence 1(f) GDPR.

    (3) Once its storage is no longer required, we will delete all of the personal data that has been collected in this connection. Should there be a statutory retention requirement, processing will be limited to this purpose. In this case, our lawful basis for the processing operation is Art. 6(1) sentence 1(c) GDPR.

    8. Orders outside of the online shop, e.g. by mail
    (1) When you wish to place an order without using our online shop, you must provide personal data, such as Name, Address and E-mail address in the course of the ordering process. In the course of the order, you will be informed which data is collected for this purpose. The submission of your personal data serves the purpose and is required to conclude the contract and to process your order. Our lawful basis for these processing operations is Art. 6(1) sentence 1(b) GDPR.

    (2) Under commercial and tax law we are required to store your address, payment, and order data for the duration of ten years. Your data will therefore not be completely deleted even when it is no longer necessary to save it for the concluded contract. Processing will, however, be limited to the degree necessary to comply with statutory obligations. In this case, our lawful basis for the processing operation is Art. 6(1) sentence 1(c) GDPR.

    (3) We will use the data that you provided to us in the course of your order exclusively for processing your order. We make use of the external service providers named below for processing the order. (a) Your address data must be forwarded to our parcel delivery service for the shipping of goods. They are obligated to treat your data as confidential and to save and use it exclusively for the purpose of delivery, and to delete it upon completion of the delivery. In this case, our lawful basis for the forwarding of data is Art. 6(1) sentence 1(b) GDPR.

    (b) Your payment data is forwarded to the contracted credit or financial institute for processing payment. In this case, our lawful basis for processing your personal data is Art. 6(1) sentence1(b) GDPR.

    (5) For orders placed through our online shop, we refer to the corresponding data privacy notice at transhumanz.org

    11. Cookies and Analysis tools
    (1) This website uses NEITHER cookies NOR analysis tools

    12. How long personal data is stored
    The duration of storage of personal data is dependent on the respective statutory retention period (e.g. retention periods in accordance with commercial and tax legislation). When the statutory retention periods expire, we delete the respective personal data as long as and insofar as the personal data is not necessary for the performance or initiation of a contract or we no longer have a legitimate interest in storing the data.