Privacy statement

The English-language version of the privacy statement is intended solely for informational purposes. Only the original German text is legally binding.

Privacy Statement

Table of content
1. Content and responsible person
2. Basic information about data usage
3. Processing of personal data
4. Collection of access data
5. Cookies
6. Piwik statistics
7. PayPal payment services
8. Services and content from thrid parties
9. Rights of the user
10. Changes of the privacy statement

1. Content and responsible person

This Privacy Statement informs about the nature, the scope and the purpose of the collection of user and consumer (hereinafter referred to as “User”) data by the luafox (hereinafter referred to as “Vendor”) website including the website, functions and content (hereinafter referred to as “online platform” or “website”). The Privacy Statement is valid for all luafox Domains, on all Systems, Platforms and devices (e.g. Desktop and mobile Devices) you are using to access the online platform.

The vendor of the online platform and the responsible authority regarding the protection of your personal data is luafox, owner: Michael Gerbracht, Blittersdorfweg 13, 45307 Essen (hereinafter referred to as “Vendor”, “we” or “our”). Please refer to the Impressum for contact information.

The definition of “user” includes all customers and visitors of our website.

2. Basic information about data usage

We are using personal data only in compliance with the data protection laws. Which means that user data is only collected if allowed by law. This is the case when data is necessary to fulfill a contract or online services or if the collection of data is demanded by law or if the user has issued an agreement on the collection of data.

The Vendor has taken organizational, contractual and technical precautions to make sure that the regulations of the data protection law are complied with and that random or intentional manipulations, loss, damage or the access of unauthorized persons are prevented.

If content, tools or other services from other vendors (hereinafter referred to as “third parties”) mentioned in this privacy statement are used and their registered seat is situated in a foreign country it has to be assumed that data is transferred to the country of the seat. The transfer only occures if it is legal or if a User has consented to the forwarding.
This is for example the case if the forwarding of data serves to fulfill contractual obligations towards the User and if the postal address is passed on to a forwarding company after an order in the Vendor’s online shop. Or if the data is requested by competent authorities such as the prosecution authorities.

3. Processing of personal data

Personal data will be processed – in addition to the already mentioned cases – for the follwing purposes, if it is legal or if a user has consented the processing of the data:
– to offer, run, maintain, optimize and secure our services
– to be able to offer customer support and technical support

Personal data which are given for the purpose of ordering goods (such as name, email address, postal address, payment details) are applied by the Vendor for the purpose of fulfilling and handling the contract. These data are handled confidentially, transferred encrypted and not passed on to third parties who are not involved in the order, delivery or payment process.

When contacting the Vendor (via contact form or email) the statements of the user will be stored for the purpose of processing the request and in the event of follow-up questions.
Personal data will be deleted, as soon as their purpose has been fulfilled unless this would conflict with preservation duties under the law.

4. collection of access data

The Vendor collects data about each access to the online offer (the so-called server log files). The access data include: name of the accessed website, file, access date and time, data volume transmitted, notification of successful access, browser type and version, the operating system of the User, Referrer URL (the previously accessed website), IP address and the requesting provider.

The Vendor applies log data without assigning it to the person of the User or without profile creation in accordance with statutory provisions exclusively for statistical analyses associated with the company, safety and the optimization of the online offer. However the Vendor reserves the right to subsequently verify log data if a specific indication of an unlawful use is given.

5. Cookies

In the context of his online offer, the Vendor uses “cookies”. Cookies are small files that are put down on the User’s computer and that can store information for the Vendor. Temporary cookies are deleted after the closing of the browser, permanent cookies remain for a given period of time and can provide information if the online offer is visited once more. Cookies are employed to make the use of the service easier. For instance a cookie saves a User’s cart status.

The User can influence the application of cookies. Most browsers provide an option that restricts or prevents the storing of cookies. The Vendor strives to shape his online offer in a way that doesn’t make the use of cookies necessary. At the same time it is pointed out that the use and especially the comfort of use is restricted without cookies.

It is possible to configure many online-ad-Cookies from other vendors by visiting the US based website http://www.aboutads.info/choices or the european website http://www.youronlinechoices.com/uk/your-ad-choices/.

6. Piwik statistics

The Vendor uses Piwik, an Open-Source-Software for the statistical web analysis of user interactions on the website. Piwik uses cookies, small text files stroed on the User’s computer, to collect information about the usage of the web services by the User. This information allows to generate pseudonyme user profiles.

Information generated by the user is stored on the webserver of the Vendor. The IP address is anonymized before it is stored.

7. PayPal payment services

We use PayPal for payments in our shop. PayPal is an online payment service vendor. Payments are handled by private or business PayPal-Accounts. PayPal also offers to pay via credit card without the need of an PayPal Account. A PayPal account is connected with the customers e-mai-address so that there is no need for a classic acount number. PayPal allows to transfer money to third parties and also to receive payments. PayPal offers depositary service and buyer protection.

The European operating company PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxemburg.

If the customers selects PayPal as payment option during the ordering process personal data is automatically transfered to PayPal. With the selection of this payment option the customers consents to transfer personal data.

Personal data send to PayPal usually includes the following Information: name and surname, address, e-mail-address, IP-address, telephone number, mobile number and other data required for the payment process. For the processing of the agreement for sale also personal data belonging to the ordering may be transfered.

The reason for transfering the data is to be able to complete the payment process and to ensure fraud protection. Personal data will be send to PayPal if there is an eligible interest for the data transfer. Data send to PayPal may be forwarded by PayPal to commercial credit reporting agencies, in order to verify the customer identity and credit-worthiness.

PayPal may forward the personal data to third parties or contractors, if this is necessary for the purpose of fulfilling and handling the contract or if the data is processed by third parties on behalf of PayPal.

The customer is able to recant the consent with PayPal about the usage of personal data. This has no influence on the processing, using and transfer of data required to fulfill the payment process.

A valid data privacy statement of PayPal can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

8. Services and content from thrid parties

We may embedd content and services like maps or fonts from third parties on our online platform. This requires to forward the IP-address of the user to the third party because otherwise the content or services can not be send to the user. Without the IP-address it would not be possible to display the content. The third party companies may use their own cookies and use the users data for their own purposes, e.g. generate user profiles. We will restrict the use of services and content from third parties as much as possible and only use services and content from trustfull companies.

Below you find a list of third parties and the content used including links to their data privacy statement which contain further information about the data usage and – if available – opt-out settings:

– External fonts from Google, Inc., https://www.google.com/fonts („Google Fonts“). Google Fonts are embedded by calling google servers (usually situated in the USA). Data privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

9. Rights of the user

The User has the right (by filing an application) to get information about all personal data which is stored by luafox. Contact information can be found in the impressum. Additionally the User has the right to set aright wrong pieces of information or to request blocking or deletion of his personal data as long as there is no conflict with legitimate record retention. If the user assumes that data is used unlawfull he has the right to complain at the controlling institution.

Personal data will be deleted, as soon as their purpose has been fulfilled unless this would conflict with preservation duties under the law.

10. Changes of the privacy statement

The Vendor may change the privacy statement, to adapt it to a new legal situation, changes in the service or changes in the data processing. This only affects descriptions of the data usage. If consent of the user is required or an exising contract is affected changes will only be made with the consent of the user.
Users are ask to read the information of the data privacy statement regularly.

Last update: 10.05.2018