Privacy policy • pickedshares

We collect, save and use your personal data in accordance with the provisions of data protection laws. In this declaration we would like to inform you about the types of data we process, for what purposes and to what extent, and what rights you are entitled to.

1. Responsible person

Responsible person within the meaning of data protection laws is

Christoph Mahlke

Sieker Landstraße 95, D-22927 Großhansdorf, Germany

E-Mail: service@pickedshares.com

2. Hosting

On the server of the host provider working for us, data processing operations are carried out for the purpose of creating and maintaining our website. This includes the provision and use of infrastructure, storage space and computing power as well as the use and implementation of security measures, maintenance and updates. The object of the processing operations on the occasion of hosting are communication data (e.g. IP addresses, date and time of visit) from visitors to the website, customers and users, as well as usage data, contract data, contact details and inventory data

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Art. 6 Paragraph 1 Clause 1 Letter f GDPR, Art. 28 GDPR, data processing contract

Recipients or categories of recipients (Art. 13 Paragraph 1 Letter e GDPR): Host provider

Duration of data storage (Art. 13 Paragraph 2 Letter a GDPR): The data are stored: a) until the time of deletion due to an objection; b) until the time of automatic deletion, which usually takes place within six months; c) up to the point in time at which the Internet offer changes in such a way that this is no longer compatible with the purposes pursued during the data collection. The event that occurs first is decisive.

3. Anonymized data collection and processing on this website

The data collected by the server and transmitted to the server via your browser are automatically saved in log files, so-called log files. This involves the following data:

URL of the page from which you came to us,
Type, version of the browser you are using,
Type, version of the operating system you are using,
Keywords that you used to find our site,
Date and time of access to our website,
Names of the subpages you have accessed,
IP address used for the request,
Provider used for the request.

We collect and process this data in anonymized form, which means that we cannot assign the data to a specific person, in particular without the support of the competent authorities, courts or the requesting provider. The purpose of data collection and processing is the evaluation for internal system-related and statistical purposes as well as in the case of misuse (e.g. criminal offenses and / or administrative offenses) for the purpose of determining and initiating prosecution and punishment by the competent authorities as well as for asserting claims under civil law.

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Art. 6 Paragraph 1 Clause 1 Letter f GDPR, Art. 28 GDPR, data processing contract

Legitimate interest of the person responsible within the meaning of Art. 6 Paragraph 1 Clause 1 Letter f GDPR (Art. 13 Paragraph 1 Letter d GDPR): The processing is based on the interest of the person responsible in obtaining information to improve and optimize our website and to enable it the prosecution of abusive behavior.

Duration of data storage (Art. 13 Paragraph 2 Letter a GDPR): The data are stored: a) up to six months; b) until the time of deletion due to an objection; c) in the case of the relevance of the data as evidence, until the conclusion of a corresponding procedure. In the cases mentioned under a and b, the first occurring event is decisive.

4. Cookies

We use so-called "cookies" for our websites. Cookies are small text files that are stored on your computer when you visit our website and saved by your browser. With the help of cookies, our server can recognize your browser, your individual settings on our website (e.g. language, font size, design) and, if applicable, parts of the login data in encrypted form, in this way making it easier for you to use our pages and, if necessary,. enable automatic login. Cookies are also used to analyze the use of our website with regard to page usage behavior (how often and for how long which pages were accessed) in order to optimize our website and make it user-friendly. Cookies allow the server of our website to recognize the calling browser after changing pages. The data stored in cookies may concern:

Login data,
Articles in a shopping cart or an order overview,
Identification number for the usage process, so-called session ID - English session identifier,
Procedural status regarding an order or reservation process,
Reference to the use of cookies by the website, so-called cookie banner.

You can use your browser settings to refuse cookies, delete cookies from your computer, block cookies or be requested before a cookie is set.

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Art. 6 Paragraph 1 Clause 1 Letter f GDPR, Art. 28 GDPR, data processing contract

Legitimate interest of the person responsible within the meaning of Art. 6 Paragraph 1 Clause 1 Letter f GDPR (Art. 13 Paragraph 1 Letter d GDPR): The processing is based on the interest of the person responsible in improving the speed, efficiency and user-friendliness of our website. If cookies are used for analysis purposes, this is done for the purpose of optimizing our website and improving user-friendliness.

Duration of data storage (Art. 13 Paragraph 2 Letter a GDPR): Cookies are stored on the user's device and last until the cookies are deleted or overwritten.

5. Use and disclosure of personal data for contractual purposes

Personal data, insofar as these are necessary for the establishment, content or modification of a contractual relationship (inventory data), are collected and processed exclusively to answer your inquiries, to process contracts concluded with you and for technical administration. The processing of your personal data includes saving, changing, transmitting, blocking and deleting this data. Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract processing - in particular passing on order data to suppliers, the shipping company commissioned with the delivery and the credit institution commissioned with the payment processing - this is necessary for billing purposes or you have previously consented. In these cases, however, the amount of data transmitted is limited to the necessary minimum.

The provision of personal data is not required by law or contract, but is necessary for the conclusion of a contract. You are not obliged to provide personal data. Failure to provide the personal data required for the conclusion of the contract means that the contract cannot be concluded and an exchange of services cannot take place.

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Art. 6 Paragraph 1 Clause 1 Letters a, b and c GDPR, Art. 28 GDPR, data processing contract

Recipients or categories of recipients (Art. 13 Paragraph 1 Letter e GDPR): Host providers, suppliers, subcontractors, external work or service providers, shipping companies, third parties involved in payment processing, credit institutions

Duration of data storage (Art. 13 Paragraph 2 Letter a GDPR): The data are stored a) until the time of deletion due to an objection; b) up to the point in time of deletion on the occasion of a revocation; c) if the storage is no longer necessary to fulfill the purpose for which it was stored; d) until the end of a legally prescribed storage or retention period; e) until the expiry of contractual or statutory warranty and guarantee periods. Unless there is a case according to d or e, the event that occurs first is decisive in cases from a to c. In the cases according to d and e, the deletion takes place when the later occurring event occurs.

6. Contact form / comment feature/ information about new posts

Our website includes the option to contact us using a contact form, to write a comment on articles or sub-pages and to receive information on new articles. If you make use of it, the entered data will be saved on the server. The data may be. around

Salutation, name,
Companies,
E-mail address,
Phone number,
Text of the message or comment you sent us,
IP address and date and time of registration.

The data collected are used for processing and, if necessary, answering the establishment of contact, processing and publication of the comment and providing information when new articles appear. By sending a contact request or submitting a comment, you give your consent to the processing of personal data. We interpret the tick next to “Send notification of further comments by e-mail” as consent to the storage and processing of personal data, in particular name, salutation, e-mail address for the purpose of issuing notification of further comments. We interpret the tick next to “Inform me about new posts by email” as consent to the storage and processing of personal data, in particular name, salutation, e-mail address for the purpose of providing information about new posts.

The provision of personal data is generally neither legally nor contractually required and is generally not required for the conclusion of a contract. You are not obliged to provide personal data. Failure to provide personal data can result in a contact request or comment not being answered correctly, or being answered incompletely.

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Art. 6 Paragraph 1 Clause 1 Letter a GDPR; Art. 28 GDPR, data processing contract

Recipients or categories of recipients (Art. 13 Paragraph 1 Letter e GDPR): Host provider

Duration of data storage (Art. 13 Paragraph 2 Letter a GDPR): The data are stored: a) until they are deleted due to a revocation; b) until deletion due to an objection; c) until the point in time at which the correspondence resulting from the establishment of contact has ended, which is the case if, based on the circumstances of the individual case, it can be assumed that the subject of the contact request has been dealt with, or contributions of a comparable type are no longer offered will; d) If data is stored in log files - this concerns the IP address as well as the date and time of registration - these will be deleted in accordance with the statements made in number 3. In cases according to a to c, the first occurring event is decisive.

7. E-Mail

Our website includes the option of contacting us by email. If you make use of this, the data entered will be saved on the server. The data is

the email address you used,
Text of the message you sent us,
IP address as well as the date and time of sending and receiving the email.

The storage of the data serves the processing and, if necessary, answering the contact via email. We interpret your sending of the contact request by email as consent to the processing of personal data.

The provision of personal data is generally not required by law or contract and is generally not required for the conclusion of a contract. You are not obliged to provide personal data. Failure to provide the necessary personal data means that an e-mail cannot be answered correctly or completely.

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Art. 6 Paragraph 1 Clause 1 Letter a or b GDPR; Art. 28 GDPR, data processing contract

Recipients or categories of recipients (Art. 13 Paragraph 1 Letter e GDPR): Host provider

Duration of data storage (Art. 13 Paragraph 2 Letter a GDPR): The data is stored: a) until it is deleted due to a revocation; b) until deletion due to an objection; c) until the point in time at which the correspondence resulting from the establishment of contact has ended, which is the case if, based on the circumstances of the individual case, it can be assumed that the subject of the request has been dealt with; d) If data is stored in log files - this concerns the IP address as well as the date and time of the sending and receipt of the email - these will be deleted in accordance with the statements made in number 3. In cases according to a to c, the first occurring event is decisive.

8. Web analysis with Google Analytics

We use Google Analytics, a web analysis service from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", i. H. Text files that are stored on your device and that allow an analysis of the use of our website. In addition to the evaluation of the use of our website carried out for us, the object of the analysis is also the determination and evaluation of the activity on our website and internet use by creating pseudonymised user profiles. We use Google Analytics to comprehensively evaluate and assess how our website is visited and to use this information to adapt our website to the needs and wishes of visitors. In this way we continuously improve our website. The information generated by cookies about the use of our website is transferred to a Google server, which may be located in the USA, and stored there. Google is certified according to the Privacy Shield Agreement - by way of self-certification - and guarantees compliance with the data protection requirements applicable in the EU. You can find more information about the privacy shield agreement at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI. We use Google Analytics only with IP anonymization (extension "anonymizeIP ()"), i. H. Your IP address will generally be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transferred to the USA in exceptional cases; in these cases the IP address is shortened there. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

You can prevent Google from collecting the data generated by cookies and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can also find information on data usage in Google's data protection declaration: https://policies.google.com/privacy/update?hl=de, setting options for displaying advertising can be found at: https://policies.google.com/ technologies / ads.

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Article 6 Paragraph 1 Sentence 1 Letter f GDPR in conjunction with Article 28 GDPR, data processing contract

Legitimate interest of the person responsible within the meaning of Art. 6 Paragraph 1 Clause 1 Letter f GDPR (Art. 13 Paragraph 1 Letter d GDPR): The use of Google Analytics serves the analysis and continuous optimization and improvement of our website and thus our own interest in preservation and improve the quality of our website.

Recipients or categories of recipients (Art. 13 Paragraph 1 Letter e GDPR): The data is received by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Duration of data storage (Art. 13 Paragraph 2 Letter a GDPR): The data are stored: a) until they are deleted due to a revocation; b) until deletion due to an objection; c) after six months. The event that occurs first is decisive.

9. WordPress Stats, Comscor Beacon

This website uses WordPress.com-Stats, a tool for statistical analysis of visitor access, operated by Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110-4929, USA, using tracking technology from Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA and comScore Inc., 11950 Democracy Drive, Suite 600 Reston, VA 20190, USA. WordPress.com-Stats uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookies about your use of this website is stored on servers in the USA. The IP address is anonymized immediately after processing and before it is saved. You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can object to the collection and use of the data by Quantcast with effect for the future by setting an opt-out cookie in your browser at this point by clicking on the link "Click here to opt-out": http: / /www.quantcast.com/opt-out. You can object to the collection and use of data by comScore with effect for the future by setting an opt-out cookie in your browser at this point: http://www.scorecardresearch.com/OptOutTag.aspx. If you delete all cookies on your computer, you will have to set the opt-out cookies again.

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Article 6 Paragraph 1 Sentence 1 Letter f GDPR in conjunction with Article 28 GDPR, data processing contract

Legitimate interest of the person responsible within the meaning of Art. 6 Paragraph 1 Clause 1 Letter f GDPR (Art. 13 Paragraph 1 Letter d GDPR): The use of WortPress Stats, Comscor Beacon serves the analysis and continuous optimization and improvement of our website and thus our own Interest in maintaining and expanding the quality of our website.

Recipients or categories of recipients (Art. 13 Paragraph 1 Letter e GDPR): The data is processed by Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110-4929, USA, and Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA.

Duration of data storage (Art. 13 Paragraph 2 Letter a GDPR): The data is stored: a) until it is deleted due to a revocation; b) until deletion due to an objection; c) after six months. The event that occurs first is decisive.

10. Social plugins from Twitter

With Twitter and the re-tweet functions, we use so-called “social plugins” from twitter.com, operated by the Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. When you visit our website, a connection is established between your computer and the Twitter servers, whereby Twitter receives the information that your device (and its IP address) has visited our website at a certain time. With the social plugins from Twitter, we want to offer visitors to our website the opportunity to conveniently access the services of Twitter. If you use the re-tweet functions, the websites you visit will be disclosed to third parties and linked to your Twitter account. In this way, Twitter can assign your visit to our website to your Twitter user account. If you do not want this, you must log out of your Twitter account before visiting our website. For details on how Twitter handles your data, as well as your rights and setting options to protect your personal data, please refer to Twitter's data protection information: http://twitter.com/privacy.

Legal basis (Art. 13 Paragraph 1 Letter c GDPR): Article 6 Paragraph 1 Letter f GDPR.

Legitimate interest of the person responsible within the meaning of Art. 6 Paragraph 1 Letter f GDPR (Art. 13 Paragraph 1 Letter d GDPR): With the integration of the social plug-in from Twitter, we offer you added value in the sense of simplifying the use of your social media Accounts in connection with our website. This makes our website more attractive.

Recipients or categories of recipients (Art. 13 Paragraph 1 Letter e GDPR): The data is received by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.

11. reCaptcha

We use the Google reCaptcha service to determine whether a person or a computer makes a certain entry in our contact or newsletter form. Google uses the following data to check whether you are a person or a computer: IP address of the device used, the website that you visit with us and on which the captcha is integrated, the date and duration of the visit, the identification data of the device used Browser and operating system type, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks for which you have to identify images. The legal basis for the data processing described is Article 6 (1) (f) of the General Data Protection Regulation. There is a legitimate interest on our part in this data processing, to ensure the security of our website and to protect us from automated input (attacks).

12. Newsletter

We offer you a newsletter in which we send out news about the website, relevant information and general advertising. If you would like to subscribe to the newsletter, you must provide a valid email address. If you subscribe to the newsletter, you agree to receive the newsletter and the procedures explained.

The newsletter is sent by a E-mail-marketing service provider specified in the registration form, whose privacy policy is also linked there.

Revocation and termination: You can revoke your consent to receive the newsletter at any time and thus cancel the newsletter subscription. After your termination, your personal data will be deleted. Your consent to the sending of the newsletter expires at the same time. At the end of each newsletter you will find the link to cancel.

13. Your rights

Due to the processing of personal data affected persons (or so called data subjects) have the following rights.

a) Right to be informed

Affected persons have the right to request confirmation from the person responsible (see number 1) as to whether personal data relating to them are being processed. If this is the case, data subjects have the right to request information about this data and the following information:

the processing purposes,
the categories of personal data that are processed,
the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular for recipients in third countries or international organizations,
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration,
the existence of a right to correction or deletion of personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing,
the existence of a right of appeal to a supervisory authority,
if the personal data are not collected from the data subject, all available information about the origin of the data,
the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

If personal data are transferred to a third country or to an international organization, the data subject has the right to be informed of the appropriate guarantees in accordance with Article 46 in connection with the transfer.

b) Right to rectification

Affected persons have the right to request the person responsible (see number 1) to correct any incorrect personal data concerning them without delay. Taking into account the purposes of the processing, data subjects have the right to request the completion of incomplete personal data - including by means of a supplementary declaration.

c) Right to deletion

Affected persons have the right to request the person responsible (see number 1) to delete personal data concerning them immediately, and the person responsible (see number 1) is obliged to delete personal data immediately if one of the following reasons applies:

The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
The data subject revokes their consent, on which the processing was based in accordance with Article 6 (1) sentence 1 letter a GDPR or Article 9 paragraph 2 letter a GDPR, and there is no other legal basis for the processing.
The person concerned objects to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or the person concerned objects to the processing in accordance with Article 21 (2) GDPR.
The personal data was processed unlawfully.
The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.
The personal data were collected in relation to the information society services offered in accordance with Article 8 (1) GDPR.

If the person responsible (see number 1) has made the personal data public and is obliged to delete it in accordance with Art. 17 Paragraph 1 GDPR, he shall take appropriate measures, including technical measures, for data processing, taking into account the available technology and the implementation costs To inform those responsible who process the personal data that a data subject has asked them to delete all links to this personal data or copies or replications of this personal data.

The right to deletion and the provisions described in the previous paragraph do not apply if processing is necessary

to exercise the right to freedom of expression and information,
to fulfill a legal obligation that requires processing under the law of the Union or of the member states to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible,
for the establishment, exercise or defense of legal claims.

d) Right to restriction of processing

Affected persons have the right to request the responsible person (see number 1) to restrict processing if one of the following conditions is met:

the accuracy of the personal data is contested by the data subject for a period of time that enables the person responsible to check the accuracy of the personal data,
the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted,
the controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
the person concerned has lodged an objection to the processing in accordance with Article 21 Paragraph 1 GDPR, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the person concerned.

If processing has been restricted in accordance with the provisions described above, these personal data - apart from their storage - may only be used with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of a important public interest of the Union or a Member State.

A data subject who has obtained a restriction on processing in accordance with the above provisions will be informed by the person responsible (see number 1) before the restriction is lifted.

e) Right to object to processing

Affected persons have the right, for reasons that arise from their particular situation, to object at any time to the processing of personal data relating to them, which is based on Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions. The person responsible (see number 1) no longer processes the personal data, unless he can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or Defense of legal claims.

If personal data are processed in order to operate direct mail, data subjects have the right to object at any time to the processing of personal data concerning them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

In connection with the use of information society services, irrespective of Directive 2002/58 / EC, the person concerned can exercise their right of objection by means of automated procedures in which technical specifications are used.

f) Right to data portability

Affected persons have the right to receive the personal data concerning them made available to the person responsible (see number 1) in a structured, common and machine-readable format.

Affected persons also have the right to transfer this data to another person responsible without hindrance from the person responsible (see number 1), insofar as this is technically feasible and the rights and freedoms of other persons are not impaired, directly between the other person responsible and the person responsible ( see number 1) if

the processing is based on consent pursuant to Article 6 Paragraph 1 Clause 1 Letter a or Article 9 Paragraph 2 Letter a GDPR or on a contract pursuant to Article 6 Paragraph 1 Letter b GDPR and
the processing is carried out using automated procedures.

g) Right of withdrawal with prior consent

Affected persons have the right to revoke their consent to the processing of personal data at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

h) Automated decision / profiling

Affected persons have the right not to be subjected to a decision based solely on automated processing - including profiling - which has legal effects on them or which significantly affects them in a similar manner. That doesn't apply when making the decision

is necessary for the conclusion or fulfillment of a contract between the data subject and the person responsible (see number 1),
is permissible on the basis of legal provisions of the Union or of the member states to which the person responsible (see number 1) is subject and these legal provisions contain appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject or
takes place with the express consent of the data subject.

In those cases in which the decision for entering into, or performance of, a contract between the data subject and the person responsible (see number 1) is required or this is made with the express consent of the person concerned, the person responsible (see number 1) appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject. This includes at least the following rights:

the right to obtain the intervention of a person on the part of the controller,
the right to express one's own point of view and
the right to contest the decision.

i) Right to complain to a supervisory authority

Affected persons have the right to complain to a supervisory authority. The right of appeal applies regardless of other legal remedies for affected persons.