Processing (personal) data by the online shop operator (asknet)
asknet processes e-commerce payment transactions, hereinafter referred to as 'transaction', in the online shops; it operates as a personal data controller to create, verify and execute transactions.
In the transaction, asknet receives customer and payment information from the buyer/end customer and uses fraud prevention services for this purpose and passes on personal data (including payment data) to a payment processor.
Responsible for processing in the sense of data protection law is:
asknet Solutions AG
You can also contact our data protection team directly by writing to email@example.com.
Our data protection officer is:
Mr. Markus Strauss
We process your data in strict confidence and only for the purpose we informed you of when collecting the data. Our standards for processing your data are the General Data Protection Regulation (GDPR), the Federal Data Protection Act (FDPA) and the other applicable data protection regulations.
The personal data you provide to us will be used by us to provide you with the products you have ordered, to process payments, to respond to your enquiries, for registration (if required) and to provide you with additional information, facilities and features about the products you have ordered. We also use this information to prevent or detect fraud and abuse of our online shops, to customise the features, performance and support of the online shops to our customers' needs, and to perform technical, logistical and other functions or improvements.
Each time you visit our online shops and their websites, a number of general data and information, including personal data, are collected by our systems. The following data is stored:
When processing this data, we do not draw any conclusions about your person. There is neither a personal evaluation nor an evaluation of the data for marketing purposes or profiling.
The legal basis for processing the data is Art. 6 para. 1 lit. f GDPR. The processing of the data is technically mandatory to provide our websites and ensure the stability and security of our systems. This is also our legitimate interest. There is no possibility to use our websites without such processing of data, i.e. you have no possibility to object.
When you shop in our online shop, we process the following personal data from you to process your order:
Within the scope of what is legally permissible, we pass on your data to our subsidiaries that support us in properly fulfilling the contract. In turn, these companies are obliged to comply with the applicable data protection regulations. In particular, these companies may only process the data to fulfil their tasks on our behalf and only in accordance with our instructions. Data processing in connection with the ordering process is based on Art. 6 (1) lit. b GDPR.
We collect your address as a basis for tax calculation, transaction processing and support, as well as for statistical purposes. We transmit your address to logistics service providers solely to fulfil your order via our online shop and for statistical purposes. We do not sell your address and contact details in conjunction with other information, combine them with non-transactional records or use them for promotional purposes.
In certain online shops, we give users the option to provide us with account registration information. This information may include but is not limited to name, address, email address and password.
Without your express prior consent, we will only send you product-related announcements of a non-promotional nature (such as announcements related to your purchase of products or subscription renewal information) and only if we deem it necessary.
If you contact us by email, fax or telephone, or if you use one of the customer service contact forms provided in the online shops, we will collect any personal data you provide to us in connection with that communication. Unless your request relates to the performance of a contract, the legal basis for processing your request is Art. 6 (1) lit. f GDPR. Our legitimate interest is the processing of your request.
Unless otherwise stated above, the legal basis for all processing activities mentioned in this section is Art. 6 (1) (b) GDPR and - with regard to processing for the purpose of complying with a legal obligation to which we are subject - Art. 6 (1) (c) GDPR.
asknet collects and processes personal data for the following purposes:
We may receive personal data about you from other sources, such as product suppliers or third parties who provide services to us in connection with the website or online shop. We may aggregate this information with the personal data we collect from you through the Website or Online Store to prevent or detect fraud or misuse of our Website or Online Stores, to fulfil your order and to contact you regarding your product order. We do not process this data for marketing purposes.
The legal bases for these processing activities are Art. 6 (1) lit. b GDPR, insofar as the data is necessary for the performance of the contract, and Art. 6 (1) lit. f GDPR for the prevention and detection of fraud and abuse.
In order to prevent late payment, we reserve the right to obtain information about your creditworthiness (for example, based on mathematical-statistical processes) from third parties for certain payment methods (for example, direct debit and purchase orders) in accordance with Art. 6 (1) f GDPR.
If you have reason to believe that a child under the age of 18 has provided asknet with personal information through the Platform, please contact firstname.lastname@example.org, and we will endeavour to delete that information from our databases.
We do not specifically collect or store information from visitors to the Website or online shops who are under the age of thirteen (13).
We may disclose your personal data to recipients if such disclosure is necessary to:
In the case of tax-exempt orders from certain EU countries your address data may be forwarded to the relevant tax authorities to check whether your value added tax identification number (VAT ID) is correct (Art. 6 para. 1 lit. c GDPR).
|Third-Party Service/Vendor||Entity Country||Nature Of Services|
|Sift Science Inc.||USA, UK||Fraud Prevention|
|ecovium Holding GmbH||Germany||SDN Screening|
|Paypal Holdings Inc.||USA||Payment processing|
|Global Collect Services B.V.||Netherlands||Payment processing|
|Chase Paymentech, LLC||USA||Payment processing|
|DG Financial Technology Inc.||Japan||Payment processing|
|Unzer GmbH||Germany||Payment processing|
|Avalara, Inc.||USA||Commercial support|
|Amazon Web Services, Inc. (AWS)||USA, Ireland, Germany, Japan||Technical Support Services|
|Freshworks Inc.||USA, UK, EU, Australia||Technical support services|
We provide analytical data to analytics and tracking technology providers as described under "Cookies and Tracking Technologies".
So-called cookies are used in online shops. These are small text files that are stored on the device with which you access the website. Different categories of cookies are used: essential cookies, analysis cookies, cookies for the provision of external media and marketing cookies.
The legal basis for the use of essential cookies is Art. 6 (1) lit. f GDPR - a legitimate interest. Our legitimate interest in using essential cookies is to be able to provide a functioning website.
The legal basis for the other cookies is Art. 6 (1) lit. a GDPR - your consent. No non-essential cookies will be set without your permission. You can revoke your permission at any time with effect for the future. You can withdraw your permission here.
You can also determine whether you wish to allow cookies via your browser settings. Please note that deactivating cookies may result in the website's limited or completely disabled functionality.
You can configure the handling of cookies in your browser yourself. By changing the settings in your browser, you can deactivate or restrict the transmission of cookies. You can delete cookies that have already been saved at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all functions to their full extent. You can find more information on the websites of your respective browser provider:
If personal data is processed by asknet as the data controller, you as the data subject have, depending on the legal basis and purpose of the processing, certain rights from Chapter III GDPR, in particular the right to information (Art. 15 GDPR), the right to correction (Art. 16 GDPR), the right to deletion (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), the right to object (Art. 21 GDPR). If the processing of personal data is based on your consent, you have the right to revoke your consent under data protection law in accordance with Art. 7 III GDPR.
To exercise your data subject rights about the data processed for the operation of this website, please contact us using the contact details provided in Section 2.
You have the right to complain to a data protection supervisory authority. To do so, you can contact the data protection supervisory authority responsible for your place of residence or federal state or the data protection supervisory authority responsible for us.
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
If we process your personal data based on our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation. This applies equally to profiling. If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, to the extent that profiling is involved in connection with such direct marketing.
In addition to the above information, you have the right to instruct asknet not to sell your data as defined in the CCPA. To this end, you may send your instructions to email@example.com. asknet will not discriminate against you for exercising any of your applicable rights under the CCPA.
If you would like more information about your rights as a data subject and/or how to exercise these rights, please contact our Data Protection Officer or firstname.lastname@example.org. Please note that the exercise of these rights is generally free of charge. If requests are manifestly unfounded or disproportionate, in particular, due to a certain level of repetition, we may charge a reasonable fee (not exceeding our actual costs) by applicable legal requirements or refuse to process the request.
With the exception of automated controls to prevent payment fraud and to avoid breaches of government sanctions lists (e.g. OFAC), we do not process your personal data for any other automated decision-making, including profiling, as addressed in Article 22(1) and (4) GDPR.
asknet retains personal data for as long as necessary to enable product sales, comply with legal obligations (statutory retention obligations), settle disputes, and enforce our agreements.
In principle, we delete your personal data as soon as it is no longer required for the aforementioned purposes unless temporary storage is still necessary. We store your personal data based on legal obligations to provide proof and to retain records, which result, among other things, from the German Commercial Code and the German Tax Act, under which retention periods of up to ten full years are provided. In addition, we retain your data for the period when claims can be asserted against our company.
Upon your request, we will restrict the processing of your personal data on the basis of applicable law. Once the legal retention periods have expired, the data will be removed from our operational systems.