The controller for the processing of personal data is:
Eruon Trade UG (haftungsbeschränkt)
In der Loh 20
40668 Meerbusch
Germany
E-mail: office@furniton.de
We process personal data of visitors and customers of our website in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other applicable data protection regulations. In the following, we inform you about the personal data we collect, the purposes for which we process it, the legal bases for this and the rights to which you are entitled.
Server log files
Every time our website is accessed, information is automatically collected by the web server and stored in so-called server log files. This may include, in particular, the following data:
accessed page or file
Date and time of access
Amount of data transferred
Notification of successful retrieval
Browser and browser version used
Operating system or device type used
Referrer URL, if submitted
IP address of the accessing device
This data is processed in order to enable the technical provision of the website, to ensure the stability and security of the website, to detect technical errors and to be able to trace cases of misuse or attack.
The legal basis for the processing is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and error-free operation of our website.
The server log files are only stored for as long as is necessary for the aforementioned purposes and are then deleted or anonymized. Longer storage will only take place if this is necessary to clarify security incidents or to assert, exercise or defend legal claims.
Cookies
Our website uses cookies. Cookies are small text files that are stored on your device and may contain certain information.
We use cookies that are necessary for the technical operation of our website and the online shop. These include, in particular, cookies that are necessary for shopping cart functions, login functions, language settings, security functions or the presentation of the website. The processing is carried out in order to enable you to use our website and the online shop. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the technically error-free and user-friendly provision of our website.
Insofar as cookies are technically absolutely necessary for the operation of the website, the storage of information on your end device or access to information stored there is based on § 25 para. 2 TDDDG. For all non-technically necessary cookies or comparable technologies, we obtain your prior consent on the basis of § 25 para. 1 TDDDG.
If we also use cookies or comparable technologies for statistical, analytical, marketing or advertising purposes, this will only be done on the basis of your prior consent. The legal basis in this case is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.
You can also prevent the storage of cookies by making the appropriate settings on your browser. Please note that in this case, it may not be possible to fully use all the functions of our website.
Cloudflare Gymnastics Styles
To protect our contact forms from spam, abuse, and automated access, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
Cloudflare Turnstile checks whether an input is made by a natural person or automatically. Technical information and signals may be processed, in particular IP address, user agent, TLS fingerprint, sitekey and associated origin page as well as other browser and device information.
The processing is carried out to secure our website and our forms, to prevent spam, abuse and automated attacks, and to ensure the functionality of our website. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the protection of our website, our forms and our IT systems.
Insofar as Cloudflare Turnstile stores technically required information on your device or accesses such information, this is done on the basis of § 25 para. 2 TDDDG.
Cloudflare processes the data partly on our behalf to provide the service and partly under its own responsibility to improve bot detection. Cloudflare may also process personal data in the United States. Cloudflare says it is certified according to the EU-U.S. Data Privacy Framework. For more information, please see Cloudflare’s Privacy Policy and Turnstile Privacy Addendum.
Bestellzuordnung / Order Attribution
Our website uses order matching features to understand which channel or source an order was placed on. Technical information, such as referrer information or campaign parameters, may be temporarily stored in cookies and, in the case of an order, stored as order metadata.
The processing is carried out to evaluate the origin of orders and to improve our online shop. The legal basis is Art. 6 (1) (f) GDPR, unless consent is required. Insofar as cookies or comparable technologies are not technically necessary for this purpose, the processing is only carried out on the basis of your prior consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.
Contact requests and communication
If you contact us by e-mail, contact form, telephone or other means, we will process the personal data you provide, in particular name, contact details and the content of the request. The processing is carried out to process your request and to communicate with you.
The legal basis is Art. 6 (1) (b) GDPR, insofar as your request is related to a contract or pre-contractual measures. In all other cases, the processing is carried out on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper processing of your enquiry.
Orders and contract processing
When you place an order in our online shop, we process the personal data required for the execution of the contract. This may include, but is not limited to, name, billing and shipping address, email address, telephone number, order details, payment information and shipping information.
The processing is carried out for the execution of the purchase contract, for payment processing, for the delivery of the ordered goods, for customer communication and for the processing of warranty, return and other contractual claims. The legal basis is Art. 6 (1) (b) GDPR. Insofar as we are legally obliged to retain certain data, the processing is carried out on the basis of Art. 6 (1) (c) GDPR.
Payment service providers
We offer you various payment methods to process payments. Depending on the payment method selected, the personal data required for payment processing will be transmitted to the respective payment service provider. This may include, but is not limited to, name, billing address, email address, order number, invoice amount, payment information, and transaction information.
PayPal
If you choose to pay via PayPal, payment will be processed via PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. The data required for payment processing will be transmitted to PayPal. PayPal processes this data in particular for the purpose of making the payment, preventing fraud, checking and preventing misuse and fulfilling legal obligations. Data processing by PayPal is partly carried out under PayPal’s own responsibility under data protection law. For more information on the processing of your data by PayPal, please refer to PayPal’s privacy policy.
The legal basis for the transmission of data to PayPal is Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the processing of the payment you have chosen. Insofar as the processing is carried out for the fulfilment of legal obligations, the legal basis is Art. 6 para. 1 lit. c GDPR. Insofar as we or PayPal have a legitimate interest in fraud prevention and secure payment processing, the legal basis is Art. 6 para. 1 lit. f GDPR.
Stripe
If you select a payment method offered through Stripe, payment processing will be handled by Stripe Payments Europe, Limited, Ireland. The data required for payment processing is transmitted to Stripe. Stripe processes this data in particular for the purpose of processing the payment, authentication, fraud prevention, risk assessment, processing of refunds, chargebacks and payment disputes, and to comply with legal obligations. For more information on how Stripe processes your data, please refer to Stripe’s Privacy Policy.
The legal basis for the transmission of data to Stripe is Art. 6 (1) (b) GDPR, insofar as the processing is necessary to process the payment you have chosen. Insofar as the processing is carried out for the fulfilment of legal obligations, the legal basis is Art. 6 para. 1 lit. c GDPR. Insofar as we or Stripe have a legitimate interest in fraud prevention and secure payment processing, the legal basis is Art. 6 para. 1 lit. f GDPR.
Klarna
If you select a payment method offered through Klarna, payment processing will be handled by Klarna Bank AB (publ), Sweden. In order to be able to offer you Klarna’s payment methods, personal data in the form of contact and order data may be transmitted to Klarna at the checkout. This may include, but is not limited to, name, address, email address, telephone number, order details, invoice amount and payment information.
Klarna processes this data in particular to check whether the respective Klarna payment methods can be offered to you, to process the payment, to carry out identity and credit checks, to prevent fraud and to comply with legal obligations. The processing by Klarna is carried out in accordance with Klarna’s data protection notice.
The legal basis for the transmission of data to Klarna is Art. 6 (1) (b) GDPR, insofar as the processing is necessary to process the payment you have chosen. Insofar as the processing is carried out for the fulfilment of legal obligations, the legal basis is Art. 6 para. 1 lit. c GDPR. Insofar as we or Klarna have a legitimate interest in secure payment processing, fraud prevention or checking the availability of certain payment methods, the legal basis is Art. 6 (1) (f) GDPR.
Disclosure of personal data
Personal data will only be passed on to third parties if this is necessary for contract processing, payment processing, delivery of goods, fulfilment of legal obligations or to safeguard legitimate interests, or if you have consented. Recipients can be payment service providers such as PayPal, Stripe and Klarna, shipping service providers, IT service providers, tax consultants, authorities or other service providers involved in the execution of the contract.
Electronic revocation function
If you use the electronic revocation function provided on our website, we will process the data you provide in this context. This may include, in particular, your name, email address, information identifying the contract or order, e.g. order number or customer number, details of the cancelled goods or parts of the contract as well as the date and time of receipt of your declaration of withdrawal.
The processing is carried out in order to receive your declaration of revocation, to assign it to the relevant contract, to document it, to process it and to transmit to you the legally required confirmation of receipt on a durable data carrier, in particular by e-mail.
The legal basis for the processing is Art. 6 (1) (c) GDPR, insofar as the processing is necessary for the fulfilment of legal obligations in connection with the provision and confirmation of the electronic revocation function. Insofar as the processing is necessary for the rescission of the contract, it is also carried out on the basis of Art. 6 (1) (b) GDPR.
The data will be deleted as soon as it is no longer required for the aforementioned purposes, provided that there are no statutory retention obligations or we do not need the data to assert, exercise or defend legal claims.
For the technical provision of the revocation function, we may use our shop system as well as commissioned technical service providers. Insofar as these service providers process personal data on our behalf, this is done on the basis of a contract for order processing.
Your rights
In accordance with the statutory provisions, you have the right to information about the personal data processed by us, the right to rectification of inaccurate data, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to the processing of personal data.
Insofar as processing is based on your consent, you have the right to revoke this consent at any time with effect for the future. The lawfulness of the processing carried out on the basis of consent before its revocation remains unaffected.
Personal data will be deleted as soon as it is no longer required for the respective processing purposes, provided that there are no statutory retention obligations or we do not need the data to assert, exercise or defend legal claims. Data that is subject to retention obligations under commercial or tax law will remain stored for the duration of these statutory periods.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
To exercise your rights, you can contact us at any time using the contact details provided in the imprint.