Privacy Policy

for the TradiNB homepage including online shop

TradiNB – an offer from Stefan Kellerbauer GmbH, (hereinafter referred to collectively as “the responsible party” or “TradiNB” or “we” or “us”) – is pleased as the operator of the website : www.tradinb.com (hereinafter also referred to as “our website”) about your visit to our websites.

Below we inform you about the processing of personal data when using our websites:

Table of contents

1. Definitions
2. Controller for data processing and data protection officer

III. Principles for the processing of personal data

1. General data processing in connection with the provision of our website and the creation of log files
2. Email contact
3. Newsletter

VII. Acquisition and maintenance of our contractual relationships

VIII. Career

1. Use of cookies
2. Google Analytics
3. Your rights as a data subject

XII. SSL Encryption

XIII. Reservation of the right to amend

I. Definitions

Our privacy policy uses terms defined in the EU General Data Protection Regulation (GDPR). To make the privacy policy readable and understandable, we have explained these terms below:

(1) Personal data

According to the GDPR, personal data is any information relating to an identified or identifiable natural person. This includes information such as your name, date of birth, address, email address, IP address, telephone number, and user behavior. In contrast, information that is not directly linked to your real identity—such as generally preferred websites of all users or the number of users on a page—is not considered personal data.

(2) Person concerned

A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

(3) Processing

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

(4) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.

(5) Controller or data controller

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.

(6) Data processors

A data processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

(7) Recipient

A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law are not considered recipients.

(8) Third

A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

(9) Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

II. Controller for processing

The controller [Art. 4 No. 7 GDPR]

Stefan Kellerbauer GmbH

Grünwalderweg 10

82008 Unterhaching

represented by its managing director

Mr. Thomas Gürtner

Registered under commercial register number: HRB 80950

at the registry court: Munich Local Court

 

Email: info@tradinb.com

Telephone number: 0160-3064435

https://tradinb.com/

The aforementioned responsible party will hereinafter be referred to collectively as “the responsible party” or “TradiNB” or “we” or “us”.

III. Principles for the processing of personal data

(1) Scope of the processing of personal data

We generally collect and use our users' personal data only to the extent necessary for providing a functional website and our content and services. The collection and use of your personal data on our website regularly only occurs with your consent. An exception applies, however, in cases where obtaining prior consent is not possible for practical reasons, and the processing of the data is nevertheless permitted by law.

(2) Legal basis for the processing of personal data

The data you provide or that is collected will be collected, used, processed, stored and, if necessary – insofar as legally required or contractually necessary – forwarded to third parties exclusively within the framework of the applicable data protection laws (GDPR, Federal Data Protection Act, State Data Protection Acts and Telemedia Act).

Article 6 of the GDPR provides various legal bases for the processing of your personal data, which are referenced in this privacy policy:

1. Article 6 paragraph 1 a) GDPR is the legal basis for processing operations of personal data if consent has been given by the data subjects.
2. Article 6(1)(b) GDPR is the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party. This legal basis also applies to processing operations necessary for taking steps prior to entering into a contract.
3. If we need to process personal data to fulfill a legal obligation of our company, the legal basis for this is Art. 6 para. 1 c) GDPR.
4. Article 6 paragraph 1 d) GDPR serves as the legal basis if processing of personal data is necessary to protect the vital interests of the data subject or of another natural person.
5. If the processing of personal data is necessary for the purposes of the legitimate interests pursued by our company or a third party, and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, then this processing shall be carried out on the legal basis of Art. 6 para. 1 f) GDPR.

(3) Data deletion and storage period

As soon as the purpose for storing the respective personal data of the data subject ceases to apply, this data will be deleted or blocked. However, storage beyond this point may occur if this is provided for in European or national regulations, laws, or other provisions to which we, as the data controller, are subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned regulations expires, unless further storage of such data is necessary for the conclusion or performance of a contract.

1. General data processing in connection with the provision of our website and the creation of log files

The scope and nature of the collection and use of your data differs depending on whether you are simply visiting our website to retrieve information or using our services – such as our shop or contact form:

(1) Visit our website

For purely informational use of our website, it is generally not necessary for you to provide us with personal data. Rather, during your visit to our website, we automatically collect, use, and store information in server log files that is transmitted to us by the browser you are using.

(2) Data collected

The following data is collected:

• Information about your browser: type, language and version you are using (e.g. Mozilla Firefox, Microsoft Internet Explorer, Apple Safari, Google Chrome)
• The operating system you are using
• The internet service provider you have appointed
• Your IP address
• Date and time of your access
• Websites from which your system accessed our website
• Websites accessed by your system via our website
• Content of the request (specific page)
• Access status/http status code
• Amount of data transferred in each case

The data listed above cannot be attributed to specific individuals. We do not combine this data with other data sources; that is, we do not store this data together with other personal data such as your name, address, telephone number, or email address.

(3) Legal basis

The legal basis for this temporary storage of data and log files is Article 6(1)(f) GDPR, as our legitimate interests in this storage, as outlined below, outweigh your interests, fundamental rights, and freedoms: The IP address is considered personal data. The temporary storage of the IP address by the system is necessary to enable the transmission of our website to your browser. For this purpose, the IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of our website. In addition, the data helps us to optimize our website and to ensure the security of our IT systems. The data is not used for marketing purposes in this context, unless you have given us your explicit consent.

(4) Duration of storage

The data is deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data collected to provide our website, this is the case when the respective session ends. If the data has been stored in log files, this is the case after a maximum of 7 days. However, storage beyond this period is also possible. In this case, your IP address will be deleted or anonymized so that it can no longer be associated with you personally.

(5) Right to object and to have the matter rectified

The collection of data for the provision of our website and the storage of data in log files is essential for the operation of the website. Therefore, you have no right to object to this.

V. Email contact

(1) Description and scope of data processing

Our website includes a form and information to facilitate quick contact/communication. If you contact us by email, the personal data you provide (such as name, email address, and any other voluntary information, e.g., a telephone number) will be automatically stored. At the time the message is sent, your IP address, date, and time will also be stored.

As an alternative to the contact form, you can also contact us via the provided email addresses. In this case, your personal data transmitted with the email will be stored for the purpose of processing your request or contacting you. Please note, however, that unencrypted emails sent over the internet are not always adequately protected against unauthorized access by third parties during transmission.

In this context, no data will be shared with third parties. The data will be used exclusively for processing the conversation.

(2) Legal basis for data processing

The legal basis for processing the data, if and to the extent that your consent is given, is Art. 6 para. 1 lit. a) GDPR.

The legal basis for processing data transmitted via email is also Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

(3) Purpose of data processing

The processing of personal data from an email sent to us serves solely to process your inquiry. This also constitutes the necessary legitimate interest in processing the data, as it is processed on the basis of Article 6(1)(f) GDPR.

(4) Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when the respective conversation with you as a user has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been conclusively resolved. After you have objected or withdrawn your consent [see section (5) below], your personal data will be deleted within 7 days. However, this data will not be deleted if we are entitled or obligated to retain it on the basis of a legal ground other than your consent, or despite your objection (e.g., in connection with the processing of client matters).

(5) Right to object and to have the matter rectified

You have the right to withdraw your consent to the processing of your personal data at any time [see section XII. (8) Right of Withdrawal below]. Furthermore, you may also object to the processing of your personal data at any time if and to the extent that this processing is based on Article 6(1)(f) GDPR [see section XII. (1) Right to Object below]. You can send both the withdrawal and the objection, for example, by email to info@tradinb.com . In such a case, however, the conversation cannot be continued. Mandatory legal provisions – in particular retention periods – remain unaffected.

VI. Use of our webshop

(1) Description and scope of data processing

If you wish to place an order in our online shop, you will need to provide your personal data, which we require to process your order. Mandatory information required for processing the contract is marked accordingly; all other information is voluntary.

Here you have the option to set up a customer account: If you wish, you can create a customer account, which allows us to save your data for future purchases. When you create an account, the data you provide will be stored until you revoke your consent. You can delete all other data, including your user account, at any time in the customer area. During the account registration process, your consent to the processing of this data will be obtained.

We use Shopify's services (see section VII. Shopify - Shop Software below), which we employ as a data processor. A corresponding data processing agreement is in place.

When you place an order, your data will be shared with third parties. Specifically, personal data (name, surname, address) will be passed on to the shipping company commissioned to deliver the ordered goods.

(2) Legal basis for data processing

The legal basis for processing the data is, if the user has given their consent, Article 6(1)(a) GDPR.

If the registration serves the purpose of fulfilling a contract to which the user is a party or of carrying out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b) GDPR.

(3) Purpose of data processing

The processing of personal data (name, surname, address, email address) is necessary for ordering goods in the online shop and their shipment. User registration is required to provide certain content and services on our website that enhance user-friendliness (e.g., managing delivery addresses, order history, wish list, profile); that is, without registration, these functions of our online shop cannot be used.

(4) Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

This applies to data collected during the registration process for the performance of a contract or for carrying out pre-contractual measures when the data is no longer required for the performance of the contract. Even after the contract has been concluded, it may be necessary to store the contracting party's personal data in order to comply with contractual or legal obligations. Further storage after the expiry of the statutory retention periods under tax and commercial law will only take place if you have expressly consented to the further use of your data.

Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years.

(5) Right to object and to have the matter rectified

As a user, you have the option to cancel your registration on our website at any time by deleting your customer account.

You can also change the data stored about you at any time in your customer account.

You also have the right to withdraw your consent to the processing of your personal data at any time. If you contact us by email or via the contact form, you can object to the storage of your personal data at any time. In such a case, however, the processing of your orders cannot be continued.

If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as no contractual or legal obligations preclude such deletion.

VII. Shopify - Shop software

(1) Description and scope of data processing

We use Shopify's services for hosting and displaying our online shop, as well as for initiating and processing contracts. We have entered into a data processing agreement with Shopify for this purpose.

Shopify is a service offered by a group of companies, including Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada; Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., Shopify Commerce Singapore Pte. Ltd., and Shopify International Limited, Dublin. Our contractual partner is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter referred to as "Shopify".

Since Shopify International Limited is part of this corporate group, it cannot be ruled out that personal data may also be processed in Canada and the USA, i.e., outside the EEA. However, an adequate level of data protection is ensured for data transfers to the Canadian company Shopify Inc. by an adequacy decision of the European Commission. Regarding any other data transfers to the USA, Spotify ensures compliance with the GDPR.

Shopify processes the following data as part of order processing:

Name, company name (if applicable), email address, IP address, payment details, telephone number (if applicable), billing and delivery address (if applicable), information about orders, information about the Shopify-supported merchant stores you visit, and information about your device and internet browser.

(2) Legal basis for data processing

The legal basis is Art. 6 para. 1 lit. b) GDPR, as you are initiating or concluding a contract with us and this contract needs to be processed.

(3) further information

Shopify also provides further data protection information at https://www.shopify.de/legal/datenschutz . You can contact Shopify's data protection officer at:

Shopify International Ltd. Attn: Data Protection Officer c/o Intertrust Ireland 2nd Floor 1-2 Victoria Buildings Haddington Road Dublin 4, D04 XN32, Ireland.

VIII. Payment Service Providers

(1) Description and scope of data processing

For payment, you can enter your payment details with our payment service providers, each of whom is independently responsible for processing the payment. Depending on the payment method you choose, we may transmit your payment details to the respective payment service provider for this purpose.

If your data is processed outside the EU, the payment service provider has committed to complying with the EU Standard Contractual Clauses. In some cases, the payment service providers also collect this data themselves under their own responsibility.

Available options include: Credit cards (VISA, Mastercard, Maestro, Amex), Apple Pay, PayPal, Klarna, Sofort

(2) Legal basis for data processing

We offer the option of processing payments via payment service providers. This is in our legitimate interest to offer an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). The legal basis for transferring your data is Art. 6 para. 1 sentence 1 lit. b GDPR, as you select the specific payment service provider, which is used for contract processing, and, in some cases, Art. 6 para. 1 sentence 1 lit. a GDPR, your consent.

(3) Further information on the specific payment service providers involved

Further information on the processing of personal data by payment service providers can be found in their privacy policies:

• VISA , Visa Europe Management Services Limited (registered number 08778032), a limited liability company incorporated in England and Wales with its registered office at 1 Sheldon Square, London W2 6TT, trading through its branch in Germany: Visa Europe Management Services Limited, German Branch, Neue Mainzer Strasse 66-68, 60311 Frankfurt. Further information can be found at https://www.visa.de/legal/privacy-policy.html

• Mastercard and Maestro ; Mastercard Europe is a subsidiary of Mastercard Incorporated, the holding company of Mastercard. Mastercard Incorporated is a privately held company under U.S. law and reports to the U.S. Securities and Exchange Commission (SEC); Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium; Mastercard Representative Office Germany, Taunusanlage 9-10, 60329 Frankfurt am Main, Germany. Further information can be found at https://www.mastercard.de/de-de/datenschutz.html

• Amex , American ^Express® (American Express Europe SA (Germany branch), American Express Payments Europe, SL (Germany branch) and American Express International, Inc. German branch, Theodor-Heuss-Allee 112
  60486 Frankfurt am Main. Further information can be found at: https://www.americanexpress.com/de-de/firma/legal/datenschutz-center/online-datenschutzerklarung/

• PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. Further information can be found in PayPal's privacy policy : https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

• Apple Pay (Apple Inc.), One Apple Park Way, MS 169-3 IPL Cupertino, CA 95014 USA. Further information can be found here : https://support.apple.com/de-de/HT203027 and in the Apple Pay Privacy Policy: https://www.apple.com/de/privacy/

• Klarna, Klarna Bank AB (publ), registered in the Swedish Commercial Register under company number 556737-0431 and with its registered office at Sveavägen 46, 111 34 Stockholm, Sweden. Further information can be found in Klarna's privacy policy : https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

• Sofort GmbH, a Klarna Group company, located at Theresienhöhe 12, 80339 Munich, Germany. Further information about Sofort GmbH can be found on their website: www.sofort.de. You can also find further information in Sofort GmbH's privacy policy : https://www.sofort.com/datenschutz.html

(4) Storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when the data is no longer needed for the performance of the contract. Even after the contract has been fulfilled, it may be necessary to store the contracting party's personal data in order to comply with contractual or legal obligations. Further storage after the statutory retention periods under tax and commercial law have expired will only take place if you have expressly consented to the further use of your data.

(5) Right of withdrawal and objection, removal

If the data processing by payment service providers is based on consent you have given them, you can revoke this consent with the respective payment service provider. However, this may result in the service not being usable and the contract not being fulfilled.

If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as no contractual or legal obligations preclude such deletion.

IX. Use of Cookies

(1) Description and scope of data processing

We use cookies to better tailor our services to your needs. We use our own cookies, which are described below, as well as third-party cookies. First, we will describe the cookies from us and Spotify. If third-party cookies or cookies for analytical purposes are used, we will inform you separately about this within this privacy policy and, if necessary, request your consent.

"Cookies" are small text files that your browser automatically creates and stores locally in your internet browser's memory on the device you are using (e.g., laptop, tablet, smartphone, etc.). These cookies allow for analysis of your website usage. Specifically, the following cookies are used:

Furthermore, our host Shopify uses cookies: see https://www.shopify.com/de/legal/cookies

These cookies will only be set after you have given your consent.

(2) Legal basis for data processing

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, insofar as technically necessary cookies are used.

Otherwise, cookies are used based on your consent. You can withdraw this consent at any time. This can be done as follows…

(3) Purpose of data processing

We use cookies to make your experience on our website more enjoyable and to optimize user-friendliness. The functions shown – such as remembering your language selection when switching to a different page and adapting to your browser – ensure the best possible presentation of our website, which is in both our and your interest.

The purposes Shopify pursues can be found in Shopify's Cookie Policy : https://www.shopify.com/de/legal/cookies

(4) Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

(5) Right to object and to have the matter rectified

Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to always display a notification before a new cookie is created. Completely disabling cookies may prevent you from using all the features of our website. You can delete cookies that have already been set at any time by accessing the relevant menu item in your internet browser or by deleting the cookies from your hard drive. Details on how to do this can be found in your internet browser's help menu.

X. Google Analytics

1. We use “Google Analytics”, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and enable an analysis of your use of the website.
2. The information generated by the cookie about your use of our website (including your IP address) is generally transmitted to and stored on a Google server in the USA. However, we have activated IP anonymization. Please note that on the website www.tradinb.com, Google Analytics has been extended with the code "gat._anonymizeIp();" to ensure anonymized collection of IP addresses (so-called IP masking). On this website, your IP address is therefore shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there. For these exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics in this exceptional case is Art. 6 para. 1 sentence 1 lit. f GDPR.
3. On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. We have entered into a data processing agreement with Google for this purpose. Processing anonymized user data allows us to analyze the browsing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of individual components of our website. This helps us to continuously improve our website and its user-friendliness. However, due to the anonymization of the IP address, usage behavior cannot be attributed to individual persons.
4. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google may also transfer this information to third parties if required to do so by law, or if third parties process this data on Google's behalf.
5. You can delete cookies you have already set at any time by accessing the relevant menu item in your internet browser or by deleting the cookies from your hard drive. Details on how to do this can be found in your internet browser's help menu. You can also prevent cookies from being stored by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of our website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
6. If you are using a mobile application – such as a tablet or smartphone – the browser plugin will not work. However, you can still prevent Google Analytics from collecting your data by clicking the following link: Deactivate Google Analytics . This will set an opt-out cookie that prevents your data from being collected on future visits to this website. Further information can be found at http://tools.google.com/dlpage/gaoptout?hl=de or at http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data privacy). Additionally, or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. This will install an opt-out cookie on your device. This will prevent Google Analytics from collecting data for this website and this browser in the future, as long as the cookie remains installed in your browser.
7. Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/de.html, Privacy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.

XI. Google Ads

(1) Description and scope of data processing

We use Google Ads. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when users enter specific search terms into Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively evaluate this data by, for example, analyzing which search terms led to the display of our advertisements and how many advertisements resulted in clicks.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/ .

(2) Legal basis for data processing

The use of Google Ads is based on Article 6 Paragraph 1 Letter a GDPR. The website operator obtains your consent for this by requesting it via…..

(3) Purpose of data processing

The data processing serves advertising purposes.

(4) Storage duration

We would like to point out that we have no control over how Google uses the collected data. According to Google, the data is encrypted and stored on secure servers.

(5) Protection and removal options

You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, to accept cookies in certain cases or to generally reject them, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.

XII. Your rights as a data subject

If we process your personal data, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:

 

(1) Right to object

Right to object (a) You have the right to object at any time, without giving reasons, to the processing of your personal data for direct marketing purposes based on Article 6(1)(f) GDPR. We will then no longer process your personal data for these purposes. This also applies in principle to profiling insofar as it is related to such direct marketing. However, we do not currently carry out any profiling. (b) You may also object to other processing activities that we derive from a legitimate interest within the meaning of Article 6(1)(f) GDPR, on grounds relating to your particular situation, by stating those grounds. This also applies in principle to profiling based on this provision. However, we do not currently carry out such profiling. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims. (c) Any objection can be made informally. For example, an email to info@tradinb.com is sufficient.

(2) Right to information

You can request confirmation from us as to whether we process personal data concerning you.

If such processing takes place, you can request further information from us regarding the following:

1. the purposes for which the personal data are processed;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom your personal data have been or will be disclosed;
4. the planned duration of the storage of your personal data or, if specific information on this is not possible, criteria for determining the storage period;
5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. all available information about the origin of the data, if the personal data is not collected from you as the data subject.

You have the right to request information as to whether your personal data is being transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR relating to the transfer.

 

(3) Right to rectification

You have the right to rectification and/or completion of your personal data processed by us, as the data controller, if it is inaccurate or incomplete. We are obligated to carry out the rectification without undue delay.

 

(4) Right to restriction of processing

Under the following conditions, you can request the restriction of the processing of your personal data:

• if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and you object to the erasure of the personal data and instead request the restriction of the use of the personal data;
• we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise or defense of legal claims, or
• if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate grounds we have asserted override your grounds.

If the processing of your personal data has been restricted, this data – apart from being stored – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If processing has been restricted in accordance with the above conditions, we will inform you before the restriction is lifted.

 

(5) Right to erasure

(a) Obligation to delete

We are obliged to delete your personal data without undue delay if any of the following grounds apply:

1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR, and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
4. Your personal data has been processed unlawfully.
5. The erasure of your personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
6. Your personal data was collected in relation to information society services offered, in accordance with Article 8(1) of the GDPR.

(b) Information to third parties

If we have made your personal data public and are obliged to erase it pursuant to Article 17(1) GDPR, we will take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers processing your personal data that you, as the data subject, have requested the erasure of all links to, copies of, or replications of that personal data.

(c) Exceptions

The right to erasure does not apply insofar as the processing is necessary.

1. to exercise the right to freedom of expression and information;
2. to fulfill a legal obligation which requires processing under Union or Member State law to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of ​​public health pursuant to Art. 9 para. 2 lit. h) and i) and Art. 9 para. 3 GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
5. for the establishment, exercise or defense of legal claims.

 

(6) Right to information

If you have asserted your right to rectification, erasure, or restriction of processing against us, we are obligated to inform all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

 

(7) Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from us, the controller to whom the personal data was provided, provided that

1. the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and
2. The processing is carried out using automated procedures.

In exercising this right, you also have the right to have your personal data transmitted directly from us, as one controller, to another controller, where technically feasible. This must not adversely affect the rights and freedoms of others.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller.

(8) Right to withdraw consent under data protection law

You have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise your right of withdrawal, simply send an email to info@tradinb.com.

(9) Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint was submitted will inform you as the complainant about the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

Please direct inquiries related to data subject rights to info@tradinb.com. Please note that for information requests not made in writing, we may require proof that you are indeed the person whose personal data is being requested, in order to protect the data subjects.

Please also bear in mind that we do not store any personal data from visitors to our website or be able to derive any direct personal reference unless you have previously voluntarily submitted personal data, e.g. to contact us.

 

XIII. SSL Encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential information that you send to us. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock icon in your browser's address bar. Activating SSL encryption protects against third parties intercepting the data you transmit to us.

XIV. Reservation of the right to amend

We reserve the right to amend this privacy policy to ensure it always complies with the applicable regulations, as well as our website offerings.

As of November 2022