Privacy policy

1) Information about the collection of personal data and contact details of the person responsible

1.1We are pleased that you visit our website and thank you for your interest. In the following we will inform you about dealing with your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2The responsible person for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Andreas Leschke, CBD Hexe Onlinehandel A. Leschke, Frankenstr. 47, 45134 Essen, Germany, Tel.: 015738275951, email: info@cbd-hexe.de. The person responsible for processing personal data is the natural or legal person who decides alone or together with others about the purposes and means of processing personal data.

1.3This website uses an SSL and TLS encryption. You can see an encrypted connection to the string "https: //" and the castle symbol in your browser line.

2) Data acquisition when visiting our website

When it comes to the mere informative use of our website, i.e. if you do not register or otherwise convey information, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we will collect the following data that is technically necessary for us to display the website:

  • Our visited website
  • Date and time at the time of access
  • Quantity of the data sent in byte
  • Source/reference from which they came to the page
  • Browser used
  • Operating system used
  • Used IP address (possibly: in anonymized form)

The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to check the server log files retrospectively, should indicate specific indications of illegal use.

3) Cookies

In order to make the visit of our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. In some cases, these cookies are automatically deleted after closing the browser (so-called "session cookies"), some of these cookies remain longer on their device and enable the storage of side settings (so-called "persistent cookies"). In the latter case, you can find the memory duration of the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies used by us, the processing in accordance with Art. 6 Para. 1 lit. b GDPR is either for the implementation of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of a granted consent or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests and one Customer -friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or can rule out the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be restricted if you are not accepted.

4) Contact

4.1Evaluation reminder by EKOMI
If you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR during or after your order, we will transmit your email address to the EKOMI of EKOMI Ltd., Markgrafenstraße 11, 10969 Berlin, (www.ekomi.de) so that this will send you an evaluation reminder by email.
You can cancel your consent at any time by a message to the person responsible for data processing or to the evaluation platform.

4.2Evaluation reminder by shopvote
If you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR during or after your order, we will transmit your email address to the Shopvote evaluation platform at Blickreif GmbH, Schulstraße 46, 80634 Munich (www.shopvote.de) so that this will send you an evaluation reminder by email.
You can cancel your consent at any time by a message to the person responsible for data processing or to the evaluation platform.

4.3Review by Trusted Shops
If you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR during or after your order, we will transmit your email address to the valuation platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de) so that this sends you an evaluation reminder by email.
You can cancel your consent at any time by a message to the person responsible for data processing or to the evaluation platform.

4.4Review by Trustpilot
If you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR during or after your order, we will send your email address to the Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com), so that they will send you an e-mail.
You can cancel your consent at any time by a message to the person responsible for data processing or to the evaluation platform.

4.5As part of contact with us (e.g. via contact form or email)-only for the purpose of processing and answering your request and only to the extent required-personal data are processed. The legal basis for the processing of this data is our legitimate interest in answering your concern in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted if it can be seen from the circumstances that the affected fact is finally clarified and if there are no legal retention obligations

5) Data processing when opening a customer account

According to Art. 6 Para. 1 Lit. B GDPR, personal data will continue to be collected and processed to the extent required if you provide us with the opening of a customer account. The input mask of the corresponding form on our website can be found in which data is required for the opening of the account. Your customer account is deleted at any time and can be made by a message to the above address of the person responsible. After deleting your customer account, your data will be deleted, provided that all contracts concluded over it are completely handled, there are no statutory retention periods and our partly no legitimate interest in the further storage continues.

6) Comment function

As part of the comment function on this website, your comment also saves information at the time of creating the comment and the commentary name you chose and published on this website. Furthermore, your IP address will be saved for security reasons in order to enable an assignment to the author in the event of illegal comments. Your email address will be saved with you to contact you if a third party should object to its published content as illegal.

7) Use of customer data for direct marketing

Registration for our email newsletter

If you register for our email newsletter, we will send you information about our offers regularly. Your email address is solely mandatory for sending the newsletter. The specification of further data is voluntary and is used to be able to address you personally. For the newsletter shipping, we use the so-called Double Opt-in that ensures that you will only receive newsletters if you have expressly confirmed your consent to the newsletter reception by pressing an email address provided to the specified email address

By activating the confirmation link, you will give us your consent to the use of your personal data in accordance with Art. 6 Para. 1 Lit. a GDPR. Here we save your IP address entered by the Internet Service provider (ISP) as well as the date and time of registration in order to be able to understand a possible misuse of your email address at a later date. The data collected by us when registering for the newsletter are used strictly. You can unsubscribe from the newsletter provided in the newsletter at any time via the link provided or by means of a message to the responsible responsible person. After deregistration, your e-mail address will be deleted immediately in our newsletter distributor, unless you have expressly consented to further use of your data or we are reserved for any further data usage that is legally permitted and about which we inform you in this declaration.

8) Data processing for order processing

8.1Insofar as the contractual processing is required for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 Lit.B GDPR.

If we are updating on the basis of a corresponding contract for goods with digital elements or for digital products, we will process the contact details you transmit when ordering (name, address, email address), in order to find them within the framework of our statutory information obligations in accordance with Art. 6 Para. 1 lit. c GDPR on a suitable communication path (e.g. postal or by email) on the upcoming updated updates in the law Personal period. Your contact details will be used strictly for communications about updates owed by us and for this purpose by us only processed to the extent that this is necessary for the respective information.

To handle your order, we also work with the subsequent service provider (s), who support us in whole or in part in the implementation. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2Use of payment service providers (payment services)

- Klarna
If a Klarna payment service is selectedhttps://www.klarna.com/de/, Sveafen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first and last name, street, house number, postcode, location, gender, email address, telephone number and IP address) as well as data that are related to the order (e.g. invoice amount, article, delivery type) for the purpose of identity and credit check to Klarna, if you check here in accordance with Article 6 (1) lit. GDPR have expressly consented to the ordering process. You can view to which information your data can be forwarded here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit information can contain probability values ​​(so-called score values). Insofar as score values ​​flow into the result of the credit information, you have your basis in a scientifically recognized mathematical-statistical process. The calculation of the score values ​​flow, among other things, but not exclusively, address data. Klarna uses the information obtained about the statistical probability of a default of payment for a weighing decision on the reason, implementation or termination of the contractual relationship.
You can revoke your consent at any time by a message to the person responsible for data processing or opposite Klarna. However, Klarna may remain entitled to process your personal data, provided that this is necessary for contractual payment processing.
Your personal details will be in accordance with the applicable data protection regulations and in accordance with the information in Klarnas Data protection provisions for those affected by HTTPS://CDN.KLARNA.com/1.0/Shahared/legal/terms/0/de_de/privacy
or for those affected based in Austriahttps://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
treated.
- Comfort fund
If you opt for a promotion type of the Payment Service provider Comfortkasse, the payment processing will be made via LTC Information Services GmbH, Business Tower, Seligenstädter Str. 107, 63073 Offenbach am Main, to which we will pass on your information provided by the information provided by the information about your order in accordance with Art. 6 Para. 1 Lit. B GDPR. Your data is passed on exclusively for the purpose of payment processing with the Payment Service provider Comfort fund and only insofar as it is necessary. You can find the data protection regulations of the comfort fund at: https://komfortkasse.eu/datenschutz.
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - “purchase on account” or “installment payment” via PayPal, we give your payment data as part of payment processing to the PayPal (Europe) S.A.R.L. et cie, s.c.a., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the execution of credit information via PayPal, direct debit via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment data will be passed on to the determination of your solvency on credit agency in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of PayPal's legitimate interest. PayPal uses the result of the credit check in relation to the statistical probability of payment for the purpose of deciding on the provision of the respective payment method. The credit information can contain probability values ​​(so-called score values). Insofar as score values ​​flow into the result of the credit information, you have your basis in a scientifically recognized mathematical-statistical process. The calculation of the score values ​​flow, among other things, but not exclusively, address data. Further data protection information, including the information used, please refer to the PayPal data protection declaration:https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by a message to PayPal. However, PayPal may remain entitled to process your personal data, provided that this is necessary for contractual payment processing.
- IMMEDIATELY
When selecting the payment method "Immediately", the payment processing is carried out via the payment service provider SOCLUMATION GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "immediately"), to which we will pass on your information given as part of the order process in addition to your order in accordance with Art. 6 Para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank (publ), Sveafen 46, 11134 Stockholm, Sweden). Your data is passed on exclusively for the purpose of payment processing with the payment service provider immediately and only insofar as it is necessary. Under the website below, you will receive more information about the data protection regulations from now: https://www.klarna.com/sofort/datenschutz.

9) Web analysis services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so -called “cookies”, these are text files that are stored on your end device and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server and stored there, here it can also be transmitted to the Google LLC server. come in the USA.
This website uses Google (Universal) Analytics exclusively with the expansion “_anonymizeiP ()”, which ensures anonymization of the IP address by reducing and excludes direct personalability. The expansion previously reduced your IP address from Google within Member States of the European Union or in other contracting states of the agreement via the European Economic Area. Only in exceptional cases is the full IP address transferred to a server by Google LLC.In the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with other services associated with website usage and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.
Google Analytics enables a special function, the so -called "demographic characteristics", and also the creation of statistics with statements about age, gender and interests of the side visitors on the basis of an evaluation of interest -related advertising and with the supply of third -party information. This allows the definition and differentiation of user circles on the website for the purpose of the target group -optimized orientation of marketing measures. However, no specific person can be assigned to the "demographic characteristics".
Details on the processing initiated by Google Analytics and how Google's dealings with data from websites can be found here:https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this granting of consent, the use of Google Analytics does not matter during your page visit.
You can revoke your consent granted at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website. We have concluded an order processing contract with Google for the use of Google Analytics, with which Google is obliged to protect our side visitors' data and not to pass it on to third parties.
For the transmission of data from the EU to the USA, Google relies on so -called standard data protection clauses of the European Commission, which should ensure compliance with the European data protection level in the United States.
Further information on Google (Universal) Analytics can be found here:https://policies.google.com/privacy?hl=de&gl=de

10) Rights of the person concerned

10.1The applicable data protection law grants you the following rights (rights of information and intervention) with regard to the processing of your personal data, whereby refer to the led legal basis for the respective exercise requirements:

  • Right of information in accordance with Art. 15 GDPR;
  • Right to correction according to Art. 16 GDPR;
  • Right to deletion according to Art. 17 GDPR;
  • Right to restrict the processing in accordance with Art. 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to revocation granted consent in accordance with Art. 7 Para. 3 GDPR;
  • Right to complaint according to Art. 77 GDPR.

10.2Right of contradictions

If we process your personal data on the basis of our predominant interest in the context of a balancing of interests, you have the right to object to this processing with effect for the future for reasons that arise from your special situation.
If you make use of your right to object, we end the processing of the data concerned. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, fundamental rights and fundamental freedoms, or if the processing of assertion, exercise or defend legal claims serves.

If we are processed your personal data to operate direct mail, you have the right to object at any time to the processing of personal data relating to the purpose of such advertising. You can exercise the objection as described above.

If you make use of your right of objection, we end the processing of the data concerned for directives.

11) Duration of the storage of personal data

The duration of the storage of personal data is measured on the basis of the respective legal basis, in the processing purpose and- if relevant- also based on the respective statutory retention period (e.g. commercial and tax law retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.

If there are statutory retention periods for data that are processed in the context of legal transactions or legal transactions based on Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention periods have no longer required to fulfill or/or/or on our part does not continue to exist in the further retention.

In the processing of personal data on the basis of Art. 6 Para. 1 Lit. f GDPR, this data is saved until the person concerned has his right to object in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend it Legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is saved until the person concerned exerts his right to object in accordance with Art. 21 Para. 2 GDPR.

Unless otherwise aroused from the other information of this explanation about specific processing situations, stored personal data will also be deleted if they are no longer necessary for the purposes for which they were collected or processed in any other way.