Privacy Policy
Controller for Data Processing:
Paul Haug
Waldstraße 37a
70597 Stuttgart, Germany
Email: info@lauroparisi.com
We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.
1. Access Data and Hosting
You can visit our website without providing personal information. Each time a webpage is accessed, the web server automatically saves a server log file, which includes the name of the requested file, your IP address, the date and time of the access, the transmitted data volume, and the requesting provider (access data). This log data is evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offering. This serves to protect our legitimate interests in the proper presentation of our offering in accordance with Art. 6 Abs. 1 S. 1 lit. f DSGVO
2. Data Processing for Contract Execution and Customer Communication
2.1 Data Processing for Contract Execution
We collect personal data to fulfill our contractual obligations (including inquiries and claims related to warranties and performance issues, as well as any legal update obligations) in accordance with Art. 6 Abs. 1 S. 1 lit. b DSGVO when you voluntarily provide it as part of your order. Required fields are marked as such, as we need this data to process the contract, and without it, we cannot complete your order. The specific data collected is shown in the respective input forms.
After the contract is fully executed, your data will be restricted for further processing and deleted after the expiration of legal retention periods unless you have explicitly consented to further use of your data (Art. 6 (1) (a) GDPR) or if we reserve the right to use data beyond this, as legally permitted.
2.2 Customer Account
If you have given your consent according to Art. 6 Abs. 1 S. 1 lit. a DSGVO by choosing to open a customer account, we will use your data to open and manage your account and to store your data for future orders on our website. You can delete your customer account at any time by contacting us or using the designated function in your account. After the deletion of your customer account, your data will be erased unless you have explicitly consented to further use of your data or if we reserve the right to use data beyond this, as legally permitted.
2.3 Contacting Us
For customer communication, we collect personal data to process your inquiries under Art. 6 (1) (b) GDPR when you voluntarily provide it by contacting us (e.g., via contact form, live chat, or email). Required fields are marked as such because we need this information to process your inquiry. The specific data collected is shown in the respective input forms. After fully processing your inquiry, your data will be deleted unless you have explicitly consented to further use of your data or if we reserve the right to use data beyond this, as legally permitted.
3. Data Processing for Shipping Purposes
To fulfill our contractual obligations in accordance with Art. 6 (1) (b) GDPR, we share your data with the shipping service provider responsible for delivering the ordered goods, to the extent necessary for the delivery. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact information provided in this privacy policy.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the shipping on our behalf (drop shipping). In these instances, they are considered shipping service providers within the meaning of this privacy policy.
Our service providers are located and/or use servers in the following countries: Germany, Italy and China.
For these countries, no adequacy decision by the European Commission exists. Our cooperation with them is based on the following safeguards:
- Standard Contractual Clauses of the European Commission
Data Transfer to Shipping Service Providers for Delivery Notifications
If you have given us your explicit consent during or after your order (Art. 6 (1) (a) GDPR), we will share your email address with the selected shipping service provider so they can contact you before delivery for notification or coordination purposes.
You may withdraw your consent at any time by sending a message to the contact option described in this privacy policy or by contacting the shipping service provider directly at the contact address provided below. After withdrawing your consent, we will delete the data you provided for this purpose, unless you have explicitly consented to further use of your data or if we reserve the right to use data beyond this, as legally permitted and as informed in this policy.
If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact information provided in this privacy policy.
Contact Information of Shipping Service Providers
-
General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
Germany -
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany -
Hermes Germany GmbH
Essener Straße 89
D-22419 Hamburg
Germany -
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany -
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
4. Data Processing for Payment Transactions
To process payments in our online shop, we collaborate with the following partners: technical service providers, financial institutions, and payment service providers.
4.1 Data Processing for Transaction Handling
Depending on the selected payment method, we transmit the data required for processing the payment transaction to our technical service providers, who act as data processors on our behalf, or to the commissioned financial institutions or the selected payment service provider, as necessary for payment processing. This is done to fulfill our contractual obligations under Art. 6 (1) (b) GDPR.
In some cases, the payment service providers collect the necessary data for processing the payment themselves, e.g., on their own website or through a technical integration during the order process. In such cases, the privacy policy of the respective payment service provider applies.
If you have any questions about our payment processing partners and the basis of our collaboration with them, please contact us using the contact information provided in this privacy policy.
4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes
We may share additional data with our service providers, which they use together with the necessary data for payment processing as data processors on our behalf for the purposes of fraud prevention and optimizing our payment processes (e.g., invoicing, handling of disputed payments, accounting support).
This serves to safeguard our legitimate interests in protecting ourselves against fraud and ensuring efficient payment management, which prevail within the framework of a balancing of interests, in accordance with Art. 6 (1) (f) GDPR.
5. Advertising via Email and Telephone
5.1 Email Newsletter Subscription
If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR.
You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or by using the designated link in the newsletter. After unsubscribing, we will delete your email address from the mailing list unless you have expressly consented to further use of your data under Art. 6 (1) (a) GDPR, or we reserve the right to use data beyond this, as legally permitted and as informed in this policy.
5.2 Telephone Advertising
If you have given your consent in accordance with Art. 6 (1) (a) GDPR, we will use the data required for this purpose or separately provided by you for our own advertising purposes, e.g., to inform you about interesting offers and our products.
You can withdraw your consent at any time, either by sending a message to the contact option described in this privacy policy or by verbally informing us during any call. After withdrawing your consent, we will delete your phone number unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, as legally permitted and as informed in this policy.
The advertising calls are carried out as part of processing on our behalf by our service providers, to whom we pass on your data for this purpose. If you have any questions about our service providers and the basis of our collaboration with them, please contact us using the contact information provided in this privacy policy.
International Data Transfers
Our service providers are located and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection: USA.
The adequacy decision for the USA serves as the basis for the transfer to third countries, provided that the respective service provider is certified. Certification is present.
6. Cookies and Other Technologies
6.1 General Information
To make your visit to our website more attractive and to enable the use of certain functions, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device.
Some of the cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).
Protection of Privacy on Devices
When using our online services, we use strictly necessary technologies to provide the explicitly requested telemedia service. Storing information on your device or accessing information already stored on your device does not require your consent in this context.
For non-essential functions, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if consent is not given, some parts of the website may not be fully usable. Any consent you give will remain effective until you adjust or reset the corresponding settings on your device.
Subsequent Data Processing through Cookies and Other Technologies
We use technologies that are necessary for the use of certain functions on our website (e.g., shopping cart function). These technologies collect and process your IP address, the time of your visit, device and browser information, and information about your use of our website (e.g., information about the contents of the shopping cart).
This serves our legitimate interests in providing an optimized presentation of our offer, which prevail within the framework of a balancing of interests in accordance with Art. 6 (1) (f) GDPR.
Additionally, we use technologies to fulfill our legal obligations (e.g., to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.
Cookie Settings
You can find the cookie settings for your browser at the following links:
If you have given your consent to the use of technologies in accordance with Art. 6 (1) (a) GDPR, you can withdraw your consent at any time by sending a message to the contact option described in this privacy policy. Alternatively, you can also visit the following link: https://gdpr-legal-cookie.com.
Please note that if you do not accept cookies, the functionality of our website may be limited.
6.2 Consent Manager Platform (CMP)
We use a consent management service ("Consent Manager Platform (CMP)") on our website to inform you about the cookies and other technologies we use and to obtain, manage, and document your consent for the processing of your personal data by these technologies, as required.
This is necessary to fulfill our legal obligation under Art. 7 (1) GDPR to be able to prove your consent to the processing of your personal data in accordance with Art. 6 (1) (c) GDPR.
The Consent Manager Platform (CMP) we use is provided by beeclever GmbH, Königsallee 27, 40212 Düsseldorf, Germany, which processes your data on our behalf.
After you submit your cookie declaration on our website, the web server stores the following data:
- IP address
- Device information
- Browser information
- Selected language
- Visited website or its URL
- Date and time of your consent declaration
- Information about your consent behavior
Additionally, the following technologies are used, which contain information about your consent behavior:
- Cookies
Your data will be deleted after one year unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR, or we reserve the right to use your data beyond this, as legally permitted and as informed in this policy.
7. Social Media
7.1 Social Buttons for Instagram (by Meta), Whatsapp
Our website uses social buttons from social networks. These are only integrated as HTML links on the website, so no connection to the servers of the respective provider is established when you visit our website.
If you click on one of the buttons, the website of the respective social network opens in a new browser window. There, you can, for example, use the Like or Share button.
7.2 Our Online Presence on Instagram (by Meta)
If you have given your consent to the respective social media operator in accordance with Art. 6 (1) (a) GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on the aforementioned social media platforms.
Using pseudonyms, usage profiles can be created from this data. These profiles may be used to display advertisements within and outside the platforms that presumably match your interests. Cookies are generally used for this purpose.
For detailed information on the processing and use of data by the respective social media operator, as well as contact options and your rights and settings to protect your privacy, please refer to the privacy policies linked below. If you need further assistance in this regard, you can contact us.
Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland").
The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, Menlo Park, California 94025, USA.
The data processing related to visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR.
For more information (including information on Insights data), please see here.
International Data Transfers
Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection:
- USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.
The adequacy decision for the USA serves as the basis for international data transfers, provided that the respective service provider is certified. A certification is in place.
Our service providers are also located and/or use servers in the following countries:
- Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
For these countries, no adequacy decision by the European Commission exists. Our cooperation with them is based on the following safeguards:
- Standard Contractual Clauses of the European Commission.
8. Contact Options and Your Rights
8.1 Your Rights
As a data subject, you have the following rights:
-
Right of Access (Art. 15 GDPR):
You have the right to request information about your personal data processed by us to the extent specified in Art. 15 GDPR. -
Right to Rectification (Art. 16 GDPR):
You have the right to request the immediate correction of inaccurate or the completion of your personal data stored by us. -
Right to Erasure (Art. 17 GDPR):
You have the right to request the deletion of your personal data stored by us, unless further processing is required:- to exercise the right to freedom of expression and information;
- to comply with a legal obligation;
- for reasons of public interest; or
- to establish, exercise, or defend legal claims.
-
Right to Restriction of Processing (Art. 18 GDPR):
You have the right to request the restriction of processing of your personal data if:- you contest the accuracy of your data;
- the processing is unlawful, but you oppose the erasure of the data;
- we no longer need the data, but you require it to establish, exercise, or defend legal claims; or
- you have objected to the processing pursuant to Art. 21 GDPR.
-
Right to Data Portability (Art. 20 GDPR):
You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or to request the transfer to another controller. -
Right to Lodge a Complaint (Art. 77 GDPR):
You have the right to lodge a complaint with a supervisory authority. Typically, you can contact the supervisory authority of your habitual residence, workplace, or our company headquarters.
Right to Object
If we process personal data to safeguard our legitimate interests based on a balancing of interests, as explained above, you have the right to object to this processing at any time with effect for the future.
If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you only have the right to object on grounds relating to your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.
8.2 Contact Options
If you have any questions about the collection, processing, or use of your personal data, or if you need information, correction, restriction, or deletion of data, as well as the withdrawal of any consent given or an objection to a particular data use, please contact us directly using the contact details provided in our Legal Notice.