1. Name and contact details of the person responsible for the processing of personal data and the company data protection officer.
Person responsible
Ultima Outdoor Living GmbHLegal representative of the person responsible
David Nickel
Contact details of the person responsible
Telephone: +49 (0) 2234 8980 4300
Fax: +49 (0) 2234 8980 409
E-Mail: service@modulair.living
Company data protection officer
You can reach our data protection officer at
Ultima Outdoor Living GmbH
Data Protection Officer
Industriestraße 2
53359 Rheinbach
E-Mail an: service@modulair.living
2. Collection and storage of personal data, the nature and purpose of their use and details of any recipients or categories of recipients of the personal data
2.1 Data processing for contract processing
2.1.1 Creation of a customer account, contract processing
In accordance with Art. 6 para. 1 lit. b GDPR, personal data is collected and processed if you provide it to us for the fulfilment of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time and can be done by sending a message to the person responsible specified under point 1. We store and use the data provided by you to process the contract. After completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us, about which we will inform you accordingly below.
2.1.2 Data transmission to transport and payment service providers
To process your order, we work together with service providers who support us in the fulfilment of the contracts concluded.The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
Transport service provider
If the goods are delivered by transport service providers, we will pass on your e-mail address and telephone number to the transport service providers in accordance with Art. 6 para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the die transport service providers for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with den transport service providers bzw. or notification of delivery is not possible. Consent can be withdrawn at any time with effect for the future from the controller named above or from the transport service provider.
2.2 Processing of IP address and access data, "cookies"
The IP address an identifier that is permanently or temporarily assigned to the Internet connection you are using by your Internet service provider (ISP). In combination with other data, the unabridged IP address may allow you to be identified: for example, your ISP is able to trace which customer was assigned a dynamic IP address at a particular time. And if you identify yourself to a website operator, for example by entering access data as part of a login, the website operator in question is able to assign the IP address you were using at that time to you.
In addition to the IP address itself, access data also includes information about when and which website content was requested by the user of the IP address in question. This includes, for example, information about which pages were requested (accessed), the number of such requests, the time of access, the time spent on these pages, etc.
When you use our website, in some cases abbreviated and thus anonymised, but also unabridged IP addresses - sometimes together with one or more access data - are transmitted to third parties. Simply calling up a page of our website does not trigger the transmission of unabridged IP addresses.
Cookies are small data files that are transferred to your computer by us or third parties and stored there for a certain period of time. There are temporary and permanent cookies that are automatically deleted after a specified period of time. These cookies are used to collect pseudonymised data under a user ID. Cookies contain, for example, information that is required for our web shop to function. Cookies can also contain data about which products you have viewed, whether something has been purchased, which products have been searched for, etc. In addition to websites visited, some of our advertising partners collect information about which pages you have previously visited or which products you were interested in in order to show you adverts that best match your interests. Cookies can therefore also be used to create user profiles. If you do not want your computer to be recognised and user profiles to be created, you can reject the use of cookies by changing the settings in your web browser to "Reject cookies". The relevant procedure can be found in the operating instructions for the web browser you are using. If you refuse the use of cookies, the use of some areas of our website may be restricted. However, to ensure the functionality of our web shop, it is sufficient to allow "temporary cookies" in your browser settings.
Below you will find more detailed information about the processing of your IP address, access data and the use of cookies.
2.2.1 Server log files
We collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you: the pages of our website requested by your computer, the date and time of these accesses, the amount of data sent in bytes, the source/reference from which you came to our site, the browser you are using, the operating system you are using and your IP address.
The legal basis for processing is point (f) of the first subparagraph of Article 6(1) GDPR, as we have a legitimate interest in maintaining and improving the stability and functionality of our website.
The data is not passed on or utilised in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use. The data is generally deleted after seven days, provided that there are no concrete indications of illegal use of our services during this period, but at the latest after the above-mentioned purpose of data collection no longer applies.
2.2.2 YouTube
Our pages contain embedded YouTube videos. As long as you do not click on the YouTube videos, no personal data will be collected or forwarded to third parties. If you click on the videos, personal data will be transferred to countries in which data protection comparable to European standards may not be guaranteed. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour to your personal profile. You can prevent this by logging out of your YouTube account before clicking on one of the YouTube videos. In detail:
Before you click on a YouTube video, you can and should read the relevant data protection provisions of Google LLC; a corresponding link is displayed with every YouTube video. When you watch the video, your data - your full IP address, which allows you to be identified, and possibly information about the page from which you access the video (in this case, the page of our website on which the YouTube video is embedded) - is transferred to a server operated by YouTube LLC, based in California (USA), a subsidiary of Google LLC, which may also be located in the USA. If you do not wish this to happen, do not click on the YouTube videos.
The legal basis for data processing may be your consent within the meaning of Art. 6(1)(a) of the General Data Protection Regulation (GDPR).
Google LLC and YouTube LLC have joined the "EU-US Privacy Shield" agreement. The EU-US Privacy Shield is an agreement in the field of data protection law that was negotiated between the European Union and the United States of America and regulates the protection of personal data that is transferred from a member state of the European Union to the USA. On 12 July 2016, the EU Commission decided that the requirements of the Privacy Shield correspond to the level of data protection in the European Union; the agreement can therefore be applied. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an analysis is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website.
When you play the YouTube videos embedded on our website, Google also uses its DoubleClick service to show you adverts that are relevant to you. We have no influence on the data collected and data processing operations. In the following, we will inform you how the data processing by DoubleClick takes place according to our current state of knowledge: A cookie used by Google DoubleClick assigns a pseudonymous identification number (ID) to your browser in order to check which adverts have been displayed in your browser and which adverts have been viewed. Google Dynamic Remarketing can also be used when a YouTube video is accessed. It is used to place adverts advertising the products and services that you have viewed on other websites. By integrating such functions (e.g. AdWords), Google receives the information that you have accessed the corresponding part of our website. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and save it.
2.2.3 Google Tag ManagerThis website uses Google Tag Manager. The Tag Manager does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
Further information on the use of Google Tag Manager data by Google can be found here:
https://policies.google.com/privacy?hl=de#infochoices
2.2.4 Google Analytics
Google Analytics is an analysis tool from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). With the help of Google Analytics, websites can be analysed to determine where users come from and how they behave on the website. On our behalf, Google will use cookies to analyse the use of our website and compile reports on website activity for us. We use Google Analytics with an extension that first shortens your IP address when you visit our website, thereby anonymising it. You can find more information about the tool, the purpose of processing and the provider's data protection policy under the following links:
https://policies.google.com/privacy?hl=de
http://www.google.com/policies/
www.google.com/intl/de/analytics/learn/privacy.html
tools.google.com/dlpage/gaoptout.
Finally, you can prevent the future collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Switch off Google Analytics tracking
DoubleClick is an advertising tool from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google), which can be used to place and display adverts for visitors to our website and third-party websites. In the following, we inform you how data processing by DoubleClick takes place according to our current state of knowledge:
2.2.5 Google Dynamic RemarketingThis website uses the remarketing function of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). The function is used to present interest-based adverts to website visitors within the Google advertising network. The technology enables us to place automatically generated, target group-orientated advertisements after your visit to our website.
The legal basis for data processing is our legitimate interest in optimising the marketing of our offer, Art. 6 para. 1 subpara. 1 letter f GDPR.
The adverts are based on the products and services that you clicked on during your last visit to our website. For this purpose, a so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he or she visits websites that belong to the Google advertising network. Cookies are small text files that are stored in your browser when you visit our website. Google usually stores information such as your web request, browser type, browser language, date and time of your request. This information is used to assign the web browser to a specific computer. On the pages of the Google advertising network, the visitor can then be presented with adverts that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.
You can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at
http://www.youronlinechoices.com/uk/your-ad-choices bzw. http://optout.networkadvertising.org folgen.
If you have a Google account and have consented to the use under https://www.google.com/settings/u/0/ads/authenticated that your browser history is linked by Google to your Google account and information from your Google account is used for ad personalisation, the remarketing function is also used across devices. Google collects your Google ID and utilises it for the purpose of cross-device recognition. If you do not wish to use Google's remarketing function, you can deactivate it by changing the relevant settings under http://www.google.com/settings/ads or in the "My account" area.
2.2.6 Microsoft Bing Ads
We use conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA on our website. Microsoft Bing Ads stores a cookie on your computer if you have reached our website via a Microsoft Bing advert. In this way, Microsoft Bing and we can recognise that someone has clicked on an ad, has been redirected to our website and has reached a predetermined target page ("conversion page"). We only learn the total number of users who clicked on a Bing advert and were then forwarded to the conversion page.
The legal basis for data processing is our legitimate interest in optimising the marketing of our offer, Art. 6 para. 1 subpara. 1 letter f GDPR.
If you do not want information about your behaviour to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this - for example, by using a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link http://choice.microsoft.com/de-DE/opt-out
explain your objection. Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement
2.2.7 Google Optimize
This website uses Google Tag Manager. The Tag Manager does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
Further information on the use of Google Tag Manager data by Google can be found here:
https://policies.google.com/privacy?hl=de#infochoices
2.3 Electronic mail
2.3.1 E-MailYou will find our company e-mail addresses on the pages of our website, which you can use to send us e-mails. Please note that communication via e-mail has security gaps. Even though telecommunications secrecy is intended to protect your e-mail content from unauthorised access and processing, e-mails can be recorded by other Internet operators and users. Things that you would not send us on a postcard should also not be sent to us unencrypted by e-mail.
If you communicate with us by e-mail, your e-mail and the personal data stored in it, such as your name, your e-mail address and any other data you provide us with in the text of the e-mail, will be transmitted to us.
This data will be processed, stored and forwarded by us to the extent necessary for the respective purpose (legal basis for data processing is then Art. 6 para. 1 subpara. 1 letter b GDPR) or with your consent (legal basis for data processing is then Art. 6 para. 1 subpara. 1 letter a GDPR). We use your e-mail address to simplify communication with you, for example in the event of queries. This data may also be passed on to third parties if this is necessary to fulfil a legal obligation to which we are subject, if it is necessary to protect the vital interests of you or another natural person, or if it is necessary for the performance of a task carried out in the public interest.
We use rapidmail to send our newsletter. Your data will therefore be transmitted to rapidmail GmbH. In doing so, rapidmail GmbH is prohibited from using your data for purposes other than sending the newsletter. Rapidmail GmbH is not permitted to pass on or sell your data. rapidmail is a German, certified newsletter software provider that has been carefully selected in accordance with the requirements of the GDPR and the BDSG.
You can revoke your consent to the storage of your data and its use for sending the newsletter at any time, e.g. via the unsubscribe link in the newsletter.
2.3.2 Live Chat
2.4 Server hosting
Our website is hosted by us on servers of centron GmbH, Heganger 29, 96103 Hallstadt (https://www.centron.de/data-protection) and domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning (https://www.df.eu/de/datenschutz) provided. The operators of the servers carry out regular daily data backups of the entire database on these servers. According to the definition of the General Data Protection Regulation, the automated reading of data for the purpose of data backup constitutes data processing, which is why we have concluded order processing agreements with the aforementioned server operators.
The legal basis for data processing is Article 6(1)(1)(f) GDPR, as we have a legitimate interest in using external servers for our website, because the technical measures we consider necessary to protect your and other personal data could not be implemented economically if the servers were operated on our own premises. Furthermore, we naturally have a legitimate interest in regular data backups.
2.5 Postal advertising
Ultima Outdoor Living GmbH has a legitimate interest in using your data, which modulair.de has collected e.g. in the context of entering into a contractual relationship with you, for marketing purposes. modulair.de processes the following data for its own marketing purposes: first name, surname, postal address, year of birth.
modulair.de is also authorised to store further (personal) data collected about you in compliance with the legal requirements for its own marketing purposes in addition to the aforementioned data. This additional stored data may include, for example, the categories of goods (e.g. "outdoor kitchen") that you have purchased from Ultima Outdoor Living GmbH.
3. Duration for which personal data is stored.
The personal data described in section 2 will generally be deleted by us when the purpose for which we collected the data no longer applies. If we are obliged under German or EU law to store the data for a longer period of time in individual cases (Art. 17 (3) (b) GDPR), the deletion is replaced by the so-called restriction of processing: The data will not be deleted initially; however, apart from being stored, it may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
In addition, you have the right to revoke any consent you have given us to process your personal data at any time - also with regard to individual personal data. The consequence of the revocation is that we will immediately delete the personal data affected by the revocation, whereby the legality of the processing carried out until the revocation remains unaffected by this.
4. Right of objection
If your personal data are processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR on grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after we have received your objection. This is due to the technical lead time required for the selection process and does not mean that we have not implemented your objection.
If you would like to exercise your right of cancellation or objection, simply send an e-mail to our data protection officer (service@modulair.living).
5. Rights of data subjects
You also have the right,
It may become necessary to amend this privacy policy as a result of the further development of our website and services or due to changes in legal or official requirements. We will inform you of any changes to the privacy policy on the website.
modulair.living