Privacy Policy

Privacy Policy

Here, we inform you about the nature, scope, and purpose of processing your personal data when using our online shop at the address "www.Rheinrefined.com". Personal data includes all information that relates to an identified or identifiable natural person.

Controller

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data. For the processing of personal data in this online shop, the controller within the meaning of the GDPR is:

Engels Trading GmbH

Kampstr. 12

40591 Düsseldorf

Phone: 0176 63609392

Email: info@engels-trading.de

When You Visit Our Website

When you visit our website, our server collects the following information from your device: browser type and version, operating system, the previously visited website ("referrer"), IP address, and the time of the page request.

We collect and process this data to ensure the smooth operation of our website and to be able to detect, defend against, and track any misuse of our services. Furthermore, we use the collected data for statistical purposes, such as evaluating which devices and browsers access our shop, in order to continually adapt and improve our offering based on this information. This data processing is carried out on the basis of Article 6(1)(f) GDPR.

All of the above-mentioned personal data is deleted no later than twelve months after collection.

When You Place an Order with Us

When you place an order in our online shop, we process your name, delivery address, and email address as you provide them during the order process. If you voluntarily provide additional data when placing your order (e.g., a different billing address or a telephone number), we also process this data.

We process this data electronically for the proper performance of the contract, in particular for delivery, invoicing, payment processing, and handling returns and complaints. If we are obliged to provide you with updates for a digital product or a product with digital elements, we also process your contact details for this purpose. This data processing is carried out based on Article 6(1)(b) GDPR.

We keep this data stored until all mutual claims arising from the respective contractual relationship with you have been completely settled, and the commercial and tax retention periods to which we are subject have expired.

For a contract between you and us, it is necessary for us to receive your name, delivery address, and email address. The necessity of providing this data arises from legal regulations (e.g., § 312i(1)(3) of the German Civil Code, § 14(4) of the German Value Added Tax Act). Without providing this data, you cannot enter into a contract with us.

We do not use automated decision-making or profiling when deciding on a contract.

Customer Account

You can optionally create a customer account in our online shop. The data required for this and processed by us can be found in the input mask for opening the customer account. The customer account is only set up at your request. The legal basis is therefore your consent in accordance with Article 6(1)(a) GDPR. We keep the personal data associated with the customer account stored until you delete the customer account or request its deletion from us. For personal data from completed contracts, the retention periods as specified in the section "When You Place an Order with Us" apply, regardless of the existence of the customer account.

Delivery and Payment

If, under the purchase contract, we send physical goods, we transmit the recipient's name and address and, if you have consented to it, your email address to the following shipping service providers: Deutsche Post (Deutsche Post AG, 53113 Bonn), DHL (DHL Paket GmbH, 53113 Bonn), UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG, 41460 Neuss), or Intex, Galle, for the purpose of delivering the shipment, including a prior email notification about the expected delivery time, and for the purpose of a possible return of your shipment to us, based on Article 6(1)(b) GDPR.

For the payment of your purchase, the payment service provider you have chosen collects and processes your name, email address, card or account number, and/or other data as required for the selected payment method. The contractual and data protection provisions of the payment service provider you have chosen apply in addition.

When receiving a payment, we process the data provided to us by the payment service provider.

If we receive a bank transfer to our account, we process, in particular, the name of the transferring account holder, the account number (IBAN and BIC), and the reference provided with the transfer.

The processing is carried out based on Article 6(1)(b) GDPR. We keep this data stored until all mutual claims arising from the respective contractual relationship with you have been completely settled, and the commercial and tax retention periods to which we are subject have expired.

Data Processors

For the operation of our website on the internet, we use the technical services of Shopify (Shopify International Limited, Dublin 4, D04 XN32, Ireland) as a data processor in accordance with Article 28 GDPR.

Contact

When you use the contact form on our website, we process the data you enter into the form, especially your name, email address, and your message.

If you send us a message by email, we store your message along with the sender data (name, email address, and any additional information added by your email program and the transmitting servers). For the receipt, storage, and sending of emails, we use an email provider who acts as a data processor for us in accordance with Article 28 GDPR.

The legal basis for this data processing is our legitimate interest in responding to your message and being able to respond to any follow-up questions from you (Article 6(1)(f) GDPR). We delete the data collected with your message no later than twelve months after the last communication with you regarding your request, subject to the regulation in the following paragraph.

If you send us a legally relevant declaration regarding the contractual relationship (e.g., a withdrawal or a complaint), the legal basis for processing, regardless of the transmission method, is also Article 6(1)(b) GDPR. In such a case, we delete the data associated with your declaration as soon as all mutual claims arising from the contractual relationship have been finally settled, and the commercial and tax retention periods have expired.

Social Media

In our shop, social media buttons may be displayed, identifiable by the logos of the social media platforms (hereinafter "platforms") (Instagram: square camera). These are links to the respective platforms based in the USA. Clicking on such a link calls up the website of the respective platform, with the IP address of the calling device and the address of the page from which the link is made ("referrer") being transmitted to the called platform in the USA. However, we do not collect or process any data ourselves in connection with the social media buttons.

Your Rights

With regard to the personal data that we process about you, you have the following rights:

1. You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, we will inform you about the personal data we store about you and provide further information in accordance with Article 15(1) and (2) GDPR.

2. You have the right to have incorrect personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of providing a supplementary statement.

3. You can request the immediate erasure of personal data concerning you under the conditions of Article 17(1) GDPR, unless the processing is necessary according to Article 17(3) GDPR.

4. You can request us to restrict the processing of your data if one of the conditions of Article 18(1) GDPR applies. You can request the restriction, in particular, instead of erasure.

5. We will notify each recipient to whom we have disclosed personal data concerning you of any rectification or erasure of your personal data and of the restriction of processing, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you request it.

6. You have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance, where technically feasible.

7. If data processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

8. RIGHT TO OBJECT: FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, YOU MAY AT ANY TIME OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; this right of objection applies to data processing based on Article 6(1)(f) GDPR for the protection of legitimate interests pursued by us or a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, outweigh those interests. If you exercise your right of objection, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms or the processing serves the assertion, exercise, or defense of legal claims.

9. IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING PURPOSES (E.G., NEWSLETTERS), YOU MAY AT ANY TIME OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING, WITH THE RESULT THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. This does not exclude other administrative or judicial remedies.