DATA PROTECTION

PRIVACY POLICY OF HEINZ WERNER GMBH

Thank you for your interest in our offer on our websites www.opium-outlet.de, www.opium-outlet.com, www.vintageasia.eu and www.hw-fashions.de. Data protection is of a particularly high priority for owners and employees of Heinz Werner Textil-Außenhandel & Vertriebs GmbH (hereinafter referred to as “HW-GmbH”).

Our website can generally be used without providing any personal data. However, if a data subject wishes to use our company’s special services via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned.

The processing of personal data, for example the name, address, email address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to HW-GmbH. In this data protection declaration we would like to inform you about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed about their rights by means of this data protection declaration.

We have implemented numerous technical and organizational measures to ensure the most complete protection possible for the personal data processed via this website. Nevertheless, data transmissions over the Internet can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us in alternative ways, for example by telephone or fax.

This data protection declaration only applies to our website. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.

Name and address of the person responsible for processing

The person responsible within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is:

Heinz Werner Textil-Außenhandel & Vertriebs GmbH

Managing director: Erik Werner

Wollbacher Str. 31

97654 Bastheim (OT Braidbach)

Germany

Tel .: 09773 1424

Email: info@hw-fashions.de & info@opium-outlet.de

Website: www.opium-outlet.de; www.opium-outlet.com; www.hw-fashions.de

Cookies

Our website uses cookies. Cookies are small text files that are placed and saved on a computer system via an internet browser.

Numerous websites and servers use cookies. When a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is called up again. We use cookies for the purpose of making our offer more user-friendly, more effective and safer. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to make the website more user-friendly.

The processing takes place on the basis of § 15 (3) TMG as well as Art. 6 (1) lit.f DSGVO from the legitimate interest in the above-mentioned purposes.

The data collected from you in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to your person. The data will not be saved together with other personal data from you.

For reasons that arise from your particular situation, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) f GDPR.

Cookies are saved on your own computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. Under the following links you can find out how you can manage or deactivate cookies in the most important browsers:

Chrome browser: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https: //support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/en-us/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Collection of general data and information in the log files

The website of HW-GmbH collects a series of general data and information each time the website is accessed by a user or an automated system. These general data and information are stored in the server’s log files. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website can be controlled, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using this general data and information, we do not draw any conclusions about the user of the website. Rather, this information is required to (1) correctly deliver the content of our website, (2) optimize the content of our website and the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website and ( 4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack. This anonymously collected data and information is therefore statistically and further evaluated by us with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data in the server log files are stored separately from all personal data provided by a data subject.

Subscription to our newsletter

On our website, you will be given the opportunity to subscribe to a newsletter in some cases now or at a later point in time. Which personal data is transmitted to the person responsible for processing when ordering the newsletter can be seen from the contact form used for this purpose.

With the following information we will inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you declare that you agree to the receipt and the described procedure.

We inform our private and commercial customers at regular intervals by means of a newsletter about company offers such as new products or special promotions. Our company’s newsletter can only be received by the person concerned if (1) the person concerned has a valid email address and (2) the person concerned registers to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by a person concerned for the first time for the newsletter dispatch.

When registering for the newsletter, we also save the IP address assigned by the Internet service provider (ISP) of the computer system used by the person concerned at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a data subject at a later point in time and therefore serves as a legal safeguard for the person responsible for processing.

The personal data collected when registering for the newsletter, such as the name and email address, will only be used to send our newsletter. The collected personal data will not be passed on to third parties. The data subject can cancel the subscription to our newsletter at any time. The consent to the storage of personal data that the data subject has given us for sending the newsletter can be revoked at any time. The withdrawal of consent should be made by phone or email.

In accordance with the provisions of the General Data Protection Regulation (GDPR) applicable from May 25, 2018, we inform you that the consents to the sending of e-mail addresses on the basis of Art. 6 Para. 1 lit. a, 7 GDPR and § 7 Para. 2 No. 3 or Paragraph 3 UWG. The use of a shipping service provider, the implementation of statistical surveys and analyzes as well as the logging of the registration process are based on our legitimate interests in accordance with Article 6 (1) (f) GDPR. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of the users.

We would also like to point out that you can object to the future processing of your personal data in accordance with the legal requirements in accordance with Art. 21 GDPR at any time. The objection can in particular be made against processing for direct marketing purposes.

Contact options via a link or a contact form on the website

Due to legal regulations, the Internet pages of HW-GmbH contain options that enable quick electronic contact to our company and direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject contacts us by email or a contact form, the personal data transmitted by the data subject will be automatically saved. Such personal data transmitted on a voluntary basis by a data subject to the person responsible for processing are stored for the purposes of processing or contacting the data subject. This personal data is not passed on to third parties.

Routine deletion and blocking of personal data

We process and store personal data of users only for the period of time that is necessary to achieve the storage purpose or if this has been provided for by the European directives and regulations or another legislator in laws or regulations to which the person responsible for the processing is subject.

If the purpose of storage no longer applies or if a storage period prescribed by the European directives and regulations or another responsible legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

Use of Google Analytics

We sometimes use the web analysis service Google Analytics from Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) on our websites. The data processing serves the purpose of analyzing this website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google Analytics uses cookies, which enable your use of the website to be analyzed. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this website. As a result, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases.

Your data may be transmitted to the USA. There is an adequacy decision by the European Commission for data transfers to the USA. The processing takes place on the basis of Art. 6 (1) lit.f GDPR from the legitimate interest in the needs-based and targeted design of the website. For reasons that arise from your particular situation, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) f GDPR.

You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser plug-in available under the following link. Download and install in [https://tools.google.com/dlpage/gaoptout?hl=de].

For more information on terms of use and data protection, see

https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

Use of YouTube

We sometimes use the YouTube LLC function for embedding YouTube videos on our website. (901 Cherry Ave., San Bruno, CA 94066, USA; “YouTube”).

YouTube is a company affiliated with Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”).

The function shows videos stored on YouTube in an iFrame on the website. The option “Extended data protection mode” is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. You can find more information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in YouTube’s data protection information (https://www.youtube.com/t/privacy).

Google Web Fonts

This page now or later uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/.

Duration of storage

After the contract has been fully processed, the data is initially stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial retention periods, and then deleted after the deadline, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR:

Right to confirmation, right to information, right to correction, right to deletion, right to restriction of processing, right to data portability, right to revocation.

Legal basis for processing

Art. 6 I lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are required to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, for example to fulfill tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, it may be necessary to process personal data in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the person concerned do not prevail. We are particularly permitted to carry out such processing operations because they have been specifically mentioned by the European legislator. In this respect, he took the view that a legitimate interest could be assumed if the person concerned is a customer of the person responsible (recital 47 sentence 2 GDPR).

In addition, according to Art. 21 (I) GDPR, you have the right to object to processing based on Art. 6 (I) f GDPR, as well as to processing for the purpose of direct mail.

Contact us if you wish. The contact details can be found in our imprint.

Right of appeal to the supervisory authority 

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you are of the opinion that the processing of your personal data is not lawful.