Data Protection

1. Preamble

Thank you for your interest in our website. The protection of your personal data is of particular concern to us. We would therefore like to provide you with the following information about the collection and use of your data via this website. As changes to the law and adjustments to our internal processes may result in editorial changes to this privacy policy from time to time, we recommend that you re-read this policy regularly.

Responsible body

The controller responsible for the operation of the website www.westernsattelboerse.de within the meaning of the Data Protection Act is Ms. Francis John, Krüdersheide 17a, 42697 Solingen, Tel: 0212-71547, Email: mail@westernsattelboerse.de.
You can also use this address to query, change or request the deletion of your data stored by us at any time.

2. SSL encryption

The www.westernsattelboerse.de website uses SSL encryption to ensure that personal data is transmitted as securely as possible. This can be recognized by the padlock symbol in the browser line and the designation “https://” in the browser line.

3. What is personal data?

Personal data is information that can be used to find out personal or factual circumstances about a person (e.g. name, address, date of birth, telephone number or email address, IP address). Data for which it is not possible (or only possible with disproportionate effort) to establish a reference to your person (e.g. by anonymizing the respective information) is not personal data.

4. Legal basis for the processing of personal data

The relevant legal bases of the General Data Protection Regulation for the processing of personal data are listed below:

  • When processing personal data on the basis of the consent of the data subject, Art. 6 para. 1 lit. a EU GDPR is the legal basis;
  • In the processing of personal data necessary for the performance of a contract with the data subject, Art. 6 para. 1 lit. b EU GDPR is the legal basis;
  • When processing personal data that is necessary for the performance of pre-contractual measures, Art. 6 para. 1 lit. b EU GDPR is the legal basis;
  • When processing personal data that is necessary for compliance with a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR serves as the legal basis;
  • When processing personal data that is necessary in order to protect the vital interests of the data subject or other natural persons, Art. 6 para. 1 lit. d EU GDPR serves as the legal basis;
  • When processing personal data that is necessary to safeguard a legitimate interest of our company or a third party, Art. 6 para. 1 lit. f EU GDPR is the legal basis;

5. Data collection

The information provided on the www.westernsattelboerse.de website is available to all Internet users without registration. If you only use our website for information purposes without registering, it is not necessary for you to actively enter any personal data. In this case, we only collect data that is automatically transmitted by your browser.

  • Time of the call (date/time)
  • Volume of data sent in bytes
  • Website visited
  • The web browser you are using and the operating system you are using
  • The IP address you used (in anonymized form if applicable)
  • Reference from which source you came to this page

6. Data collection for contract fulfillment, registration as a customer

The personal data provided by you in the context and for the purpose of your intended use of our services (e.g. registration as a customer, execution of the contract) are necessary for the fulfillment of the contract and the provision of the services within the meaning of Art. 6 para. 1 lit. b GDPR and are processed by us only in the context and for the purpose of providing the services in accordance with the contract. Your customer data with us can be deleted at any time at your request to the person responsible, provided that this is legally permissible with regard to statutory retention periods. After complete termination of the contractual relationship (including processing), the personal data of the respective user will be deleted in compliance with statutory retention periods, unless consent for further use of the data has been given.

7. Data processing in the processing of orders

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the order processing, insofar as this is necessary for the delivery of the goods or to coordinate the delivery date. We will pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8. Use of cookies

In order to enable and facilitate your use of our platform, we use so-called cookies on our platform. These are text files that are stored on the end device of the respective user of the platform and make it possible to recognize the user during his or her visit to the platform. After leaving the website, some of the cookies are usually automatically deleted from the computer of the respective user (so-called session cookies). Other cookies remain on your computer as persistent cookies, enabling us and our partner companies to recognize the respective user on their next visit and, if necessary, to enable them to log in. Where cookies are set, they collect and process certain user information (e.g. location data, browser data, IP addresses) to an individual extent. Persistent cookies are automatically deleted after a predefined period in each individual case. If personal data is processed by individual cookies used by us, this is done in accordance with Art. 6 para. 1 lit. f EU GDPR to protect our legitimate interests in the best possible functionality of the platform and a customer-oriented and effective design of the platform visit. You can prevent cookies from being stored on your computer by making the appropriate browser settings. Please contact the provider of your browser to find out how to do this. We would like to point out that although our website can still be accessed after deactivating cookies, our service may then only function to a limited extent or not at all. If the third-party services used by us and named in this privacy policy use cookies, please contact the respective providers to find out how they work and how they process data.

9. Rights of the data subjects

If your personal data is processed, you are a “data subject” within the meaning of the EU GDPR. You therefore have the following rights:

a. Right to information

You have the right to information as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from us:

  • The purposes for which your personal data has been processed.
  • The categories of personal data that are processed
  • The recipients or categories of recipients to whom your personal data has been or will be disclosed.
  • The planned duration of the storage of your data or, if specific information on this is not possible, criteria for determining the storage period.
  • The existence of a right to rectification or erasure of your data, a right to restriction of processing by us or a right to object to such processing.
  • The existence of a right to lodge a complaint with a supervisory authority.
  • All available information about the origin of the data if the personal data was not collected from you.
  • The existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject. You are entitled to request information as to whether your data is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 EU GDPR in connection with the transfer.

b. Right to rectification

If your personal data stored by us is incorrect or incomplete, you have the right to rectification and/or completion. We must then make this correction without delay.

c. Right to restriction of processing

You can request the restriction of the processing of your personal data in accordance with Art. 18 EU GDPR under the following conditions:

  • if the accuracy of your personal data is contested by you, for as long as the verification of the accuracy of the data is ongoing;
  • if the processing of your data by us is unlawful, you refuse to delete your data and instead demand that we restrict its use;
  • if we no longer need your data for the purpose of processing, but you need it for the assertion, exercise or defense of legal claims;
  • if you have objected to the processing pursuant to Art. 21 EU GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.

If the processing of your data has been restricted, it may only be processed by us - with the exception of storage - with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been obtained in accordance with the above conditions, you will be notified by us before the restriction is lifted.

d. Right to erasure

Obligation to erase

You can demand that we delete your data immediately. We are obliged to erase your data immediately if one of the following reasons applies:

  • Your data is no longer necessary for the purposes for which it was collected or otherwise processed
  • You withdraw your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a EU GDPR and there is no other legal basis for the processing
  • You object pursuant to Art. 21 para. 1 EU GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 EU GDPR.
  • Your data has been processed unlawfully.
  • The deletion of your data is necessary to fulfill a legal obligation under Union law or the law of the member states to which we are subject.
  • Your data was collected in relation to information society services offered in accordance with Art. 8 para. 1 EU GDPR.

Information to third parties

If we have made your data public and we are obliged to erase it pursuant to Art. 17 (1) GDPR, we will take reasonable steps (including technical measures) to inform controllers who also disseminate your data that you as the data subject have requested the erasure of all links to, copies or replications of your personal data. Exceptions to the deletion obligation

The right to erasure does not apply if:

  • the processing is necessary to exercise the right to freedom of expression and information for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us
  • For reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
  • For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or for the establishment, exercise or defense of legal claims.

e. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of the rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort on our part.

You have the right to be informed by us about these recipients.

f. Right to data portability

You have the right to receive your data from us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us if

  • provided that the processing is based on consent pursuant to Art. 6 para. 1 lit. a EU GDPR or Art. 9 para. 2 lit. a EU GDPR or on a contract pursuant to Art. 6 para. 1 lit. b EU GDPR and
  • the processing is carried out using automated procedures.

In this respect, you also have the right to have us transfer your data to another controller, insofar as this is technically feasible. However, this must not adversely affect the freedoms and rights of other persons.
This right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

g. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of your data which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

h. Right to revoke the declaration of consent under data protection law

You have the right to revoke declarations of consent under data protection law that you have given us at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

i. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your data infringes data protection law.

The supervisory authority to which the complaint has been submitted will inform you as the so-called complainant about the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 EU GDPR.

10. Objection / information

Users of the platform can object to the collection, processing or use of their data at any time. Users also have the right to access, correct, block and delete their stored personal data at any time. Personal data is deleted if consent to storage is revoked or if knowledge of this data is no longer required to achieve the purpose for which it was stored. If immediate deletion is not possible due to conflicting tax or commercial law regulations, deletion will take place after the relevant deadlines have expired.