Privacy Policy

1. Information about the collection of personal data and contact details of the controller
2. Data collection when visiting our website
3. Contact
4. Cookies
5. Data processing for order processing
6. Data processing when opening a customer account and for contract processing
7. Use of your data for direct marketing purposes
8. Rights of the data subject
9. Duration of storage of personal data

1. Information about the collection of personal data and contact details of the controller

1.1. Thank you for visiting our website. In the following, we would like to inform you about the handling of your personal data when using our website. Personal data is basically all data with which you can be personally identified .

1.2. Responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is:
Fred Hellmann
Daimlerstr. 4
35447 Reiskirchen
Deutschland
Tel.:0 6408 95990
Fax:06408 9599-10
E-mail: info@hevo-shop.com.

1.3. In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.

2. Data collection when visiting our website

Each time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and maintaining the functionality of our website. A transfer or other use of the data does not take place. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
We reserve the right to check the server log files retrospectively if there are concrete indications of illegal use. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

3. Contact

If you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored. The collected data can be found in the respective input mask. When contacting us by e-mail, only the data you enter there will be transmitted to us.
The data will be used exclusively for processing the conversation and your request. The legal basis for the processing of the data is Art. 6 para. 1 lit. a) GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected and provided that there are no legal storage obligations to the contrary. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been conclusively clarified. The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

4. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user's device. When a user accesses a website, a cookie may be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies are not used to create user profiles. In the above-mentioned purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f) GDPR.

In addition, our website may use cookies that enable an analysis of the surfing behavior of users (so-called third-party cookies). Further information on the scope, purpose, legal basis and possibilities of objection can be found in the respective sections of the respective chapter of this data protection declaration.

As a user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate, restrict or delete the transmission of cookies. If you disable cookies for our website, it may no longer be possible to use all functions of the website to their full extent. You can prevent the transmission of Flash cookies by changing the Flash Player settings.

Help for the settings can be found in the respective help menu of your browser under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted after closing your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.


The Klarna checkout solution used here (Klarna Bank AB (publ.), Sveavägen 46, 111 34 Stockholm, Sweden) uses cookies to ensure that your use of Klarna checkout runs smoothly.
More information about the individual cookies and an explanation of their respective purpose can be found for Germany at:http: cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf and here for Austria https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_at/checkout.pdf.

5. Data processing for order processing

5.1. If you wish to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to process your order.

Sometimes we work with external service providers to process your order. For this purpose, we must pass on the personal data required for this.

If we commission transport companies with the delivery of your goods, we will pass on your data required for the delivery of the goods to the respective transport company. For the processing of payments, we pass on your data to the commissioned bank as far as necessary. If we use payment service providers, you will also be informed below.
The legal basis for the transfer of your data is Art. 6 para. 1 lit. b GDPR.

5.2. Transfer of your personal data to shipping service providers

- DHL

If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery and within the scope of necessity in accordance with Art. 6 para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to DHL in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery announcement. Your consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned controller or the transport service provider DHL.

5.3. Use of payment service providers

- Klarna

When paying via the following payment methods (provided that: offered): - "Klarna purchase on account" - "Klarna Installment Purchase" - "Klarna Direct Debit" (a Klarna instant payment method) - "Klarna credit card payment" (a Klarna instant payment method) payment is processed by Klarna AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). We provide your personal data (first and last name, Street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery method) for the purpose of identity and Credit check to Klarna if you are in accordance with Art. 6 para. 1 lit. a GDPR have expressly consented to the disclosure. Klarna may transfer your data to one of the following credit agencies: pass: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report , these have their basis in a scientifically recognized Mathematical-statistical procedures. Flow into the calculation of the score values among other things, but not exclusively, address data. You can express your consent at any time by sending a message to the controller responsible for the processing of your data or to Klarna revoke. However, Klarna may still reserve the right to to process personal data if this is necessary for the contractual Payment processing is required. For data subjects based in Germany, the following applies: Klarna Privacy Policy: https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdfFür Data subjects based in Austria are subject to the following data protection provisions of Klarna: https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf

- PayPal
If you select the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "payment by instalments" via PayPal, payment is processed by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").
We provide your personal data in accordance with Article 6 (1) lit. b GDPR to PayPal within the scope of necessity. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal.
For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. The result of the credit check with regard to the statistical probability of non-payment PayPal used for the purpose of deciding on the provision of the respective payment method.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.
What other data is collected by PayPal results from the respective data protection declaration of PayPal. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

6. Data processing when opening a customer account and for contract processing

If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 para. 1 lit. b GDPR. The scope of the data can be seen in the input form. The data you enter will be stored and used by us for contract processing.
You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if offered, directly in the customer account. In this case, we will also block your data with regard to tax and commercial retention periods and delete it after expiry of these periods. This can only be opposed by your consent to permanent storage or a legally permitted further use of data on our part.

7. Use of your data for direct marketing purposes

7.1. Newsletter

On our website it is possible to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask will be transmitted to us. The only mandatory information is your email address. If you make further voluntary entries, these will only be used for personal contact.

The legal basis for the processing of your data after registration for the newsletter is Art. 6 para. 1 lit. a GDPR if the user has given his consent. We obtain this by sending you a confirmation email containing a confirmation link after registering for the newsletter. If you click on this link, you also give your consent to receive the newsletter.
When sending the registration for the newsletter, we store your IP address as well as the date and time of registration. This storage serves to be able to understand a possible misuse of your e-mail address.

We use the data collected by us when registering for the newsletter exclusively for the purpose of sending the newsletter.

You can cancel your subscription to the newsletter at any time. For this purpose, there is a corresponding link in each newsletter. This also makes it possible to revoke the consent to the storage of personal data collected during the registration process.

7.2. Advertising by letter post

If you have left your first and last name, your postal address and, if applicable, other personal data on the basis of an order with us, we reserve the right to store this data and to send you our offers by post in order to safeguard our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR.
< br>You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the controller.

8. Rights of the data subject

8.1. The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

- Right of access pursuant to Article 15 GDPR:
You may request confirmation from the controller as to whether personal data concerning you are processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of other rights such as correction of the data or the existence of a right of appeal to a supervisory authority, the origin of your data, if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope of such processing concerning you and the intended effects of such processing, as well as your right to be informed of the guarantees pursuant to Article 46 GDPR when transferring your data to third countries;

- Right to rectification pursuant to Article 16 GDPR:
You have the right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us; the correction or completion must be made immediately.

- Right to restriction of processing pursuant to Article 18 GDPR:
You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data if you use your data to assert, exercise or defence of legal claims after we no longer need this data after the purpose has been achieved or if you have objected for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
If the processing of personal data concerning you has been restricted, this data may – apart from its storage – only with your consent or to assert exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

- Right to erasure pursuant to Article 17 GDPR:
You have the right to request the immediate deletion of your personal data if the requirements of Article 17 (1) GDPR are met. However, this right to erasure does not exist in particular - not exhaustively - if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims

- Right to information pursuant to Article 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to inform all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, if this is not impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

- Right to data portability pursuant to Article 20 GDPR:
You have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller, insofar as this is technically possible;

- Right of revocation pursuant to Art. 7 para. 3 GDPR:
You have the right to object at any time to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.
You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

- Right to lodge a complaint pursuant to Article 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.

8.2. Right to object

You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest after a balance of interests.
If you exercise this right of objection, we will stop processing your data, if there are no verifiable overriding compelling reasons worthy of protection that preclude termination or if further processing serves to exercise or defend legal claims.

9. Duration of storage of personal data

The duration of the storage of personal data depends on statutory retention periods. After their expiry, we routinely delete the data if they are no longer required for the fulfilment or initiation of the contract and/or if there is no legitimate interest for us in further storage .