Cocon Commerz PRIVATSACHEN GmbH
Wendenstraße 404, 20537 Hamburg/Germany
Commercial Register AG Hamburg
Registration number: HRB 60992
Authorized representative: Cornelia Rethmann
VAT No: DE811986446
is responsible for your personal data in accordance with the applicable data protection law.

The data we collect from you is stored within the European Economic Area (EEA), but may be transferred to and processed in a country outside the EEA. Any such transfer of your personal data will be in compliance with applicable laws. For transfers to countries outside the EEA, Cocon Commerz uses standard contractual clauses and the Privacy Shield, unless an adequacy decision has been made by the European Commission.

Your data will only be processed within our company in Hamburg/Germany for our corporate purposes. Your data will not be shared, sold or exchanged with third parties outside our company for marketing purposes. Data is only shared with third parties to provide you with our services. You can find the categories of third parties below under the relevant procedures.

For each specific processing of personal data we collect, we will tell you whether the provision of personal data is required by law or necessary for the conclusion of the contract. We will also indicate whether you are required to provide the personal data and the consequences of not providing it.

RIGHT TO INFORMATION:

You have the right to request information about your personal data stored by us at any time. You can ask Cocon Commerz to send you your personal data by e-mail.

RIGHT OF PORTABILITY:

If Cocon Commerz processes your personal data automatically with your consent or on the basis of a relevant agreement, you have the right to request a copy of your data in a structured, commonly used and machine-readable format to be sent to you or another party. This only applies to the personal data that you have provided to us.

RIGHT TO RECTIFICATION:

You have the right to request that your personal data be corrected should it be inaccurate. This includes the right to have incomplete personal data completed.You have the right to have personal data processed by Cocon Commerz deleted at any time, except in the following cases:

• You are in contact with customer service to clarify a matter.
• You have placed an order that has not yet been shipped or has only been partially shipped.
• You have outstanding payments with Cocon Commerz, regardless of the payment method.
• If you have misused or suspected misuse of our services in the last four years.
• You have assigned your debts to a third party within the last three years (one year in the case of deceased customers).
• Your credit application has been denied within the last three months.
  
   If you have made purchases, we retain your personal data related to your transaction in accordance with accounting regulations.

RIGHT TO OBJECT TO PROCESSING BASED ON LEGITIMATE INTEREST:

You have the right to object to the processing of your personal data based on a legitimate interest of Cocon Commerz. Cocon Commerz will no longer process the personal data unless we can demonstrate legitimate grounds for the processing which override your interests and rights, or for the defence of legal claims.

RIGHT TO REFUSE DIRECT MARKETING:

You have the right to refuse direct marketing. This also applies to profiling analytics for direct marketing purposes. You have the following options to refuse direct marketing: according to the instructions in the promotional email.

RIGHT TO RESTRICTION

You have the right to request that Cocon Commerz restrict the processing of your personal data in the following circumstances:

If you object to processing based on a legitimate interest of Cocon Commerz, Cocon Commerz will restrict all processing of the data in question until the legitimate interest is established.

If you inform us that your personal data is incorrect, Cocon Commerz must restrict the entire processing of the data in question until it is clarified whether the personal data is indeed incorrect.

If the processing is unlawful, you may object to the erasure of personal data and request the restriction of the use of your personal data instead.

If Cocon Commerz no longer needs the personal data, but it is necessary for you to defend your legal claims.

We have appointed a Data Protection Officer to ensure that we process your personal data openly, accurately and properly. You can reach our Data Protection Officer at coconcommerz@googlemail.com. Specify data protection officer in the subject line.

If you believe that Cocon Commerz is not processing your personal data correctly, you can contact us. You also have the right to lodge a complaint with a supervisory authority.

Occasionally, we need to update our privacy policy. The latest version of the Privacy Policy is always available on our website. We will inform you of any material changes to the privacy statement, for example, the purpose for using your personal data, the person responsible for data processing or your rights. We keep your data as long as you are an active customer.

If you choose credit as a payment method, an automated decision will be made on your credit application. You have the right to comment on this and to appeal this decision to our team.

Why do we use your personal data?

We use your personal data to send you promotional offers, invitations to participate sales, events, etc. via email, SMS, phone and mail. These services are based on your previous purchases and the information you have provided to us.

What kind of personal data do we process?

We process the following categories of personal data:

• Contact information such as email address, phone number and zip code
• Gender (if you voluntarily provide information about it)
• Which items and offers you have purchased

Who has access to your personal data?

Data will be disclosed to third parties only for the purpose of providing the above-mentioned services, i.e. to advertising agencies and technical service providers for physical and digital direct advertising. Under no circumstances will your data be disclosed, sold or exchanged with third parties outside Cocon Commerz for advertising purposes.

What is the legal basis for processing your personal data?

The processing of your personal data is based on your consent to direct marketing. Postal advertising (including catalogs), on the other hand, is sent based on our legitimate interest.

Right to object to processing on the basis of a legitimate interest:

You have the right to object to the processing of your personal data based on a legitimate interest of Cocon Commerz. Cocon Commerz will no longer process the personal data unless we can demonstrate legitimate grounds for the processing which override your interests and rights, or for the defence of legal claims.

HOW LONG DO WE KEEP YOUR DATA?

We keep your data continuously during an ongoing business relationship. After the end of the business relationship, the data is kept for up to 12 months (processing). In the event of complaints, your personal data will be kept for up to 2 years.

Why do we use your personal data?

We use your personal data to comply with legal obligations and to implement court rulings and regulatory decisions. Your personal data is also used to collect and audit accounting data in accordance with accounting rules.

What kind of personal data do we process?

We process the following categories of personal data:

Customer number, Order number, Name, Postal address, Transaction amount, Transaction date

Who has access to your personal data?

Your data will only be shared within Cocon Commerz. We also share your personal data with IT companies that provide accounting systems.

What is the legal basis for processing your personal data?

The processing of your personal data is necessary for Cocon Commerz to comply with its legal obligations.

HOW LONG DO WE STORE YOUR DATA?

We store your data according to the accounting rules in your country.