Privacy policy
Privacy policy
of Puretoi GmbH
(as of 03.02.2021)
As part of our privacy policy, we inform our customers and visitors to our website about the collection and processing of personal data by us. Personal data is all data that can be related to an identified or identifiable natural person, for example names, addresses, e-mail addresses, but also user behavior.
The controller responsible for data processing is
Puretoi.com is operated by:
Puretoi GmbH
Alexanderstrasse 20
40210 Düsseldorf
Email: info@puretoi.com
You can contact our data protection officer at
Puretoi GmbH
Data Protection Officer
Alexanderstrasse 20
40210 Düsseldorf
Email:info@puretoi.com
Thank you for your interest in our online store. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.
1. access data and hosting
You can visit our website without providing any personal information. Each time a website is accessed, the web server only automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access.
This access data is analyzed exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. Pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our legitimate interests in the correct presentation of our website, which predominate in the context of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to our website.
Hosting services by a third-party provider
As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. All data collected as part of the use of this website or in the forms provided for this purpose in the online store as described below are processed on its servers. Processing on other servers only takes place within the scope described here.
This service provider is located within a country of the European Union or the European Economic Area.
2. data collection and use for contract processing, establishing contact and opening a customer account
We collect personal data if you voluntarily provide it to us as part of your order or when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we need the data to process the contract or to process your contact and you cannot send the order or contact without providing it. Which data is collected can be seen from the respective input forms. We use the data provided by you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and processing your inquiries.
If you have given your consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.
After completion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.
3. data transfer
In order to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for the processing of payments to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
4. e-mail newsletter
E-mail advertising with newsletter registration
If you register for our newsletter, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address from the list of recipients, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
5. use of data for payment processing
Identity and credit check when selecting Klarna payment services
If you choose Klarna's payment services, we ask for your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR that we may transmit the data necessary for the processing of the payment and an identity and credit check to Klarna. In Germany, the credit agencies mentioned in Klarna's privacy policy may be used for identity and credit checks.
Klarna uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the contact details below. This may result in us no longer being able to offer you certain payment options. You can also withdraw your consent to this use of your personal data at any time by contacting Klarna.
6. cookies
In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
If cookies are not accepted, the functionality of our website may be restricted.
7. social media
The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as a contact option and your rights and setting options in this regard to protect your privacy can be found in the providers' data protection notices:
Our online presence on Facebook, YouTube, Instagram
Our presence on social networks and platforms serves to improve active communication with our customers and interested parties. We provide information there about our products and current special offers.
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called user profiles using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. As a rule, cookies are used on your end device for this purpose. The visitor behavior and the interests of the users are stored in these cookies. This serves in accordance with Art. 6 para. 1 lit. f. GDPR to safeguard our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. If you are asked by the respective social media platform operators for consent (agreement) to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewedhere:
For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your rights in this regard and setting options to protect your privacy, in particular opt-out options, please refer to the providers' data protection notices linked below. If you still need help in this regard, you can contact us.
Data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can viewhere:
Further information on data processing when visiting a Facebook fan page (information on Insights data) can be foundat here.
Possibility of objection (opt-out):
8. contact options and your rights
As the data subject, you have the following rights:
* in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
* in accordance with Art. 16 GDPR, the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
* in accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing * to exercise the right to freedom of expression and information;
* to fulfill a legal obligation;
* for reasons of public interest or
* is necessary for the establishment, exercise or defense of legal claims;
* in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data if * the accuracy of the data is disputed by you;
* the processing is unlawful, but you object to its erasure;
* we no longer need the data, but you need it to assert, exercise or defend legal claims, or
* you have objected to the processing pursuant to Art. 21 GDPR;
* Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
* pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of consents granted or objection to a specific use of data, please contact us directly via the contact details in our imprint.
Right of objection
Insofar as we process personal data as explained above in order to safeguard our legitimate interests, which predominate in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims
This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.
