Data Privacy Policy

 

Information on the collection of personal data and contact details of the controller

We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about how your personal data is handled when you use our website. Personal data means all data by which you can be personally identified.

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

BUMA Motorsport UG (haftungsbeschränkt), Conrad Böhnke, Lindenallee 2, 19417 Jesendorf, Germany

Phone: +49 (0) 1575 89255 28

info@moto-renzo.de

The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to our server (known as “server log files”). When you visit our website, we collect the following data, which we technically need in order to display the website to you:

- Browser type and version
- Operating system used
- Source/referrer from which you reached the page
- Web page you visit
- Date and time of your access
- Your Internet Protocol (IP) address

The data is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

 

Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use what are known as cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (known as session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information, such as browser and location data and IP address values, to varying degrees. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
In some cases the cookies serve to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Where personal data is also processed by individual cookies implemented by us, the processing takes place in accordance with Art. 6(1)(b) GDPR either for the performance of the contract or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective website visit.
We may work with advertising partners who help us to make our website more interesting for you. In that case, cookies from partner companies are also stored on your hard drive for this purpose when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the paragraphs below.
Please note that you can set your browser so that you are informed when cookies are set and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers at the following links:

- Internet Explorer: https://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
- Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Chrome: https://support.google.com/chrome/bin/answer.py?hl=en&answer=95647
- Safari: https://www.apple.com/legal/privacy/en-ww/cookies
- Opera: https://help.opera.com/en/latest/web-preferences

Please note that the functionality of our website may be limited if you do not accept cookies. You can prevent the installation of cookies by adjusting your browser settings accordingly; however, we point out that in this case you may not be able to use all the functions of our website to their full extent.

Registration function

On our website we offer you the opportunity to register. The data entered in the course of this registration, which can be seen from the input fields of the registration form

[First name, last name, e-mail address, company name, VAT ID no., street/no., postcode / town, country, telephone number]

is collected and stored exclusively for the use of our services. When you register on our website, we also store your IP address and the date and time of your registration. This serves as a safeguard on our part in the event that a third party misuses your data and registers on our website with this data without your knowledge.  This data is not passed on to third parties. Nor is the data collected in this way compared with data that may be collected by other components of our website.

Contact option

When you contact us (e.g. by contact form or e-mail), personal data is collected; you can see which data this is from the contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your enquiry is aimed at concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be erased after your enquiry has been fully processed; this is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations prevent this.

Comment option

On our website we offer you the opportunity to leave comments on individual posts. When you do so, the IP address of the author/internet connection holder is stored. This storage is for our security in the event that the author infringes the rights of third parties through their comment and/or posts unlawful content. We therefore have our own interest in the stored data of the author, particularly since we may be held liable for such infringements. This data is not passed on to third parties. Nor is the data collected in this way compared with data that may be collected by other components of our website.

Newsletter

If you tick the box for our newsletter when registering, when ordering or on our newsletter page, we will send you offers and news from our shop by e-mail. As proof of your subscription, we store the time and your IP address.

We use CleverReach, a service of CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, to send the newsletter. For this purpose, we transmit to CleverReach your e-mail address and, where available, your title, first and last name, company, address, country and date of birth from your customer account, as well as information about your orders (customer number, customer group, number of orders, date of your last order and turnover). This allows us to send you content that matches your purchases. CleverReach also records whether you open a newsletter and which links in it you click; we evaluate this to improve the newsletter.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via the unsubscribe link in every newsletter, in your customer account or by e-mail to us. After unsubscribing, your address will be blocked in the mailing list and will no longer be contacted. Further information can be found in CleverReach’s privacy policy: https://www.cleverreach.com/en/privacy-policy/

Use of reCAPTCHA

To protect input forms on our website, we use the “reCAPTCHA” service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”. This service makes it possible to distinguish whether the relevant input is of human origin or is made improperly through automated machine processing.

To our knowledge, the referrer URL, the IP address, the behaviour of website visitors, information about the operating system, browser and length of stay, cookies, display instructions and scripts, the user’s input behaviour and mouse movements in the area of the “reCAPTCHA” checkbox are transmitted to “Google”.

Google uses the information obtained in this way, among other things, to digitise books and other printed matter and to optimise services such as Google Street View and Google Maps (e.g. recognition of house numbers and street names).

The IP address transmitted as part of “reCAPTCHA” is not merged with other data from Google unless you are logged in to your Google account at the time you use the “reCAPTCHA” plug-in. If you want to prevent this transmission and storage of data about you and your behaviour on our website by “Google”, you must log out of “Google” before you visit our website or use the reCAPTCHA plug-in.

The information obtained through use of the “reCAPTCHA” service is used in accordance with the Google terms of use: 

https://www.google.com/intl/en/policies/privacy/.

Use of Facebook components

We use components from the provider facebook.com on our website. Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.
Each time one of our web pages equipped with such a component is accessed, this component causes the browser you are using to download a corresponding display of the component from Facebook. Through this process, Facebook is informed which specific page of our website you are currently visiting.
If you access our website while logged in to Facebook, Facebook recognises from the information collected by the component which specific page you are visiting and assigns this information to your personal Facebook account. If, for example, you click the  “Like” button or post a comment, this information is transmitted to your personal user account on Facebook and stored there. In addition, the information that you have visited our website is passed on to Facebook. This happens regardless of whether you click on the component or not.
If you want to prevent this transmission and storage of data about you and your behaviour on our website by Facebook, you must log out of Facebook before you visit our website. Facebook’s privacy notices provide further information on this, in particular on the collection and use of data by Facebook, your related rights and the setting options for protecting your privacy: https://www.facebook.com/about/privacy/
You can find an overview of the Facebook plug-ins at https://developers.facebook.com/docs/plugins/

Use of Twitter recommendation components

We use components from the provider Twitter on our website. Twitter is a service of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.

Each time one of our web pages equipped with such a component is accessed, this component causes the browser you are using to download a corresponding display of the component from Twitter. Through this process, Twitter is informed which specific page of our website is currently being visited.
We have no influence on the data that Twitter collects in this way, nor on the extent of the data collected by Twitter. To our knowledge, Twitter collects the URL of the respective web page accessed and the IP address of the user, but does not use them for any purposes other than displaying the Twitter component. Further information can be found in Twitter’s privacy policy at https://twitter.com/privacy.

You can change your privacy settings in your account settings at https://twitter.com/account/settings.

Use of Google-Adwords

To promote our website, we also use the Google advertising tool “Google-Adwords”. As part of this, we use the analysis service “Conversion-Tracking” of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”, on our website. If you reached our website via a Google ad, a cookie is placed on your computer. Cookies are small text files that your internet browser places and stores on your computer. These “conversion cookies” expire after 30 days and are not used to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, we and Google can recognise that you, as a user, clicked on one of our ads placed on Google and were redirected to our website.

The information obtained with the help of the “conversion cookies” is used by Google to compile visit statistics for our website. These statistics tell us the total number of users who clicked on our ad and also which pages of our website were then accessed by the respective user. However, we and other advertisers using “Google-Adwords” do not receive any information that can be used to personally identify users.

You can prevent the installation of the “conversion cookies” by adjusting your browser settings accordingly, for example with a browser setting that generally deactivates the automatic setting of cookies or specifically blocks only cookies from the domain “googleadservices.com”.

Google’s privacy policy on this can be found at the following link: https://services.google.com/sitestats/en.html

Google Analytics

If you have given your consent in the cookie banner, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics sets cookies and records how you use our website, for example the pages you visit, items viewed and added to the cart, purchases, the source of your visit (e.g. search engine or ad), device, browser and approximate location. Google Analytics 4 does not store IP addresses. We use the reports to improve our shop and our advertising. The data is stored for 14 months; the period starts again with each new visit.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time in the cookie settings. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy

Google Ads: conversion tracking and enhanced conversions

Also only with your consent in the cookie banner, we measure whether a visit via a Google ad led to a purchase. For this purpose, we transmit the order value and the order number to Google after an order. In addition, we transmit your e-mail address, telephone number, name and billing address; this information is encrypted in your browser before transmission (hash value), so that Google can only match it with existing Google accounts (“enhanced conversions”). This helps us to measure the effect of our ads more accurately.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time in the cookie settings. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework.

Google Customer Reviews

On our order confirmation page we use the “Google Customer Reviews” programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For this purpose, your browser loads a script from Google when the page is opened; in doing so, Google technically receives your IP address. Google asks you in a separate window whether you would like to take part in a survey about your purchase after delivery. Only if you agree there will Google receive your e-mail address, the order number, the delivery country and the estimated delivery date. Google will then send you an e-mail asking you to rate your purchase. Google may publish your rating, for example as a star rating in Google Shopping.

The legal basis for loading the script is our legitimate interest in customer reviews (Art. 6(1)(f) GDPR); the legal basis for passing on your order data is the consent you give in Google’s window (Art. 6(1)(a) GDPR). You can withdraw your consent at any time using the unsubscribe link in Google’s e-mail. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy

Review invitations via Trustpilot

For some orders we use the review service of Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen K, Denmark (“Trustpilot”). For this purpose, we transmit your name, your e-mail address and the order number to Trustpilot after your order. About one week later, Trustpilot sends you a single e-mail asking you to rate your purchase. Your review will be published on trustpilot.com.

The legal basis is our legitimate interest in customer reviews (Art. 6(1)(f) GDPR). You can object to this at any time by e-mail to us or via the unsubscribe link in Trustpilot’s e-mail. Further information can be found in Trustpilot’s privacy policy: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms

To process your order, we work with the service provider(s) listed below, who support us in whole or in part in performing concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data we collect is passed on to the carrier responsible for delivery as part of the performance of the contract, insofar as this is necessary for delivery of the goods. We pass on your payment data to the credit institution instructed as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we explicitly inform you of this below. The legal basis for passing on the data here is Art. 6(1)(b) GDPR.

Unless otherwise agreed, payments are to be made without deduction, cash discount or other reductions. Where financial institutions and other payment service providers are used, the terms and conditions and privacy notices of the payment service providers also apply with regard to payment. Customers are asked to observe these provisions and notices as well as the information provided during the payment process. This is particularly important because the availability of payment methods or the course of the payment procedure may also depend on the agreements between the customer and financial institutions and payment service providers (e.g. agreed spending limits, location-restricted payment options, verification procedures, etc.). The customer shall ensure that they meet the requirements incumbent on them that are necessary for successful payment using the selected payment method. These include, in particular, sufficient funds in bank and other payment accounts, registration, identification and authorisation with payment services, and the confirmation of transactions.
If a payment is not executed or is charged back because of insufficient funds in the customer’s account, incorrect bank details or an unjustified objection by the customer, the customer shall bear the resulting fees, provided that the customer is responsible for the failed or reversed booking and, in the case of a SEPA transfer, was informed of the transfer in good time (so-called “pre-notification”). Prepayment – If payment in advance by bank transfer has been agreed, the payment amount is due upon conclusion of the contract, unless expressly agreed otherwise. The seller will provide the customer with its bank details. Delivery takes place after receipt of payment. If, despite being due and despite a further reminder, the prepayment has not been received by the seller within 5 calendar days after the order confirmation was sent, the seller withdraws from the contract, with the result that the order lapses and the seller has no obligation to deliver. The order is then settled for the customer and the seller without further consequences.

Payment is processed via the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: “PayPal”) using the type of PayPal payment provided or selected by the customer. Customers are forwarded directly to PayPal at the end of the ordering process. For customers who have a PayPal account, the following PayPal terms of use apply: www.paypal.com/de/webapps/mpp/ua/useragreement-full. If customers use PayPal’s services without having a PayPal account, the following terms of use apply: www.paypal.com/de/webapps/mpp/ua/privacywax-full. Overview of all terms: www.paypal.com/de/webapps/mpp/ua/legalhub-full.
- PayPal instalments - A prerequisite for payment in instalments via PayPal is a successful check of the customer’s address and creditworthiness by PayPal. The seller assigns its payment claim against the customer to PayPal. A payment with debt-discharging effect can only be made to PayPal in accordance with PayPal’s conditions.
- PayPal “Checkout” – Here the seller may use third-party payment service providers for the purpose of processing payments. The following information applies to PayPal or the respective named third-party payment service providers (collectively referred to as “checkout payment service providers”). The terms of the checkout payment service provider communicated to the customer apply. If the seller offers purchase on account or payment in instalments via the checkout payment service provider, the seller reserves the right to make a successful check of the customer’s address and creditworthiness by the checkout payment service provider a prerequisite for the payment method. The seller assigns the payment to the checkout payment service provider. A payment with debt-discharging effect can only be made to the checkout payment service provider in accordance with the terms and the selected or specified payment term of the checkout payment service provider. In the case of payment by SEPA direct debit mandate, the customer must issue a SEPA direct debit mandate to the checkout payment service provider. Issuing the SEPA direct debit mandate authorises the checkout payment service provider to initiate the payment transaction, which automatically debits the customer’s bank account. The customer is informed of the date on which their bank account will be debited (so-called “pre-notification”).

These buttons lead directly to PayPal. If customers use one of them, PayPal sends us their name, e-mail address and delivery address so that we can process the order (Art. 6(1)(b) GDPR). To display the buttons, the browser loads a script from PayPal on these pages. PayPal receives technical data such as the IP address. This serves our legitimate interest in a simple payment process (Art. 6(1)(f) GDPR).

Where we offer these payment methods, the payment is processed by the payment service provider Stripe (Stripe Payments Europe, Limited and Stripe Technology Europe, Limited, both Ireland, hereinafter: “Stripe”). Customers enter their payment details directly with Stripe, either in an input field provided by Stripe during checkout or on a Stripe payment page. We do not receive complete card or account details, only the confirmation of payment and details such as the payment method and the last four digits of the card. We send Stripe in particular the amount, currency, an order reference and the e-mail address. The legal basis is Art. 6(1)(b) GDPR. Stripe also processes data under its own responsibility, for example to prevent fraud and to meet legal obligations. Data may also be transferred to third countries such as the USA. According to Stripe, it relies among other things on the EU-U.S. Data Privacy Framework and standard contractual clauses. More information: stripe.com/en-de/privacy.

Where we offer Klarna payment methods (for example invoice, instalments, direct debit or instant bank transfer), the payment is processed by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter: “Klarna”). For this purpose we send Klarna contact and address data as well as details of the order. The legal basis is Art. 6(1)(b) GDPR. For purchases on invoice and instalments, Klarna may check the identity and creditworthiness of customers and use credit agencies for this. Klarna decides under its own responsibility which payment methods it offers. More information: www.klarna.com/international/privacy-policy. The technical connection to Klarna may run via the Gambio Payment Hub of Gambio GmbH, Bremen, Germany.

Applicable data protection law grants you comprehensive data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), about which we inform you below:
Right of access under Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing and objection to processing and of the right to lodge a complaint with a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR that exist when your data is transferred to third countries; Right to rectification under Art. 16 GDPR: You have the right to obtain without undue delay the rectification of inaccurate data concerning you and/or the completion of your incomplete data stored by us.
Right to erasure under Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
Right to restriction of processing under Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data, which you contest, is being verified; if you refuse the erasure of your data because of unlawful data processing and instead request the restriction of the processing of your data; if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data once the purpose has been achieved; or if you have objected on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours.
Right to notification under Art. 19 GDPR: If you have exercised the right to rectification, erasure or restriction of processing with the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability under Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller, where technically feasible.
Right to withdraw consent under Art. 7(3) GDPR: You have the right to withdraw consent once given to the processing of data at any time with effect for the future. In the event of withdrawal, we will erase the data concerned without undue delay unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Right to lodge a complaint under Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Right to object

If we process your personal data on the basis of our overriding legitimate interest following a balancing of interests, you have the right at any time, on grounds relating to your particular situation, to object to this processing with effect for the future.
If you exercise your right to object, we will stop processing the data concerned. However, we may continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. You can exercise your right to object as described above.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

Duration of storage of personal data

The duration of storage of personal data is determined by the respective statutory retention period (e.g. retention periods under commercial and tax law). After the period has expired, the data in question is routinely erased, provided that it is no longer needed for the performance or initiation of a contract and/or we have no further legitimate interest in continuing to store it.