Data protection

Data protection notice for the website

DG Nexolution Procurement & Logistics GmbH welcomes you on its website (hereinafter also "Internet offer"). We appreciate your interest and would like to make your stay on our website as pleasant as possible. For us, this also includes a responsible handling of your data, which complies with the legal requirements in Germany in every respect.

1 General Information

This privacy notice applies to the website www.genostore.de. If offers from other providers ("Third-party offers") are accessible from our website, our data protection notices do not apply to these third-party offers. In this case, we are also not responsible for the processing of your personal data in the context of such third-party offers within the meaning of i. S. v. Article 4 No. 7 DS-GVO.

1.1 Processing of personal data

Personal data within the meaning of Article 4 of the EU General Data Protection Regulation (GDPR) is any information relating to an identified or identifiable natural person, e.B name, address, e-mail addresses, etc.

Person in charge
We are the "controller" for the processing of your personal data on this website within the meaning of Art. 4 No. 7 GDPR.

You can reach us as follows:
DG Nexolution Procurement & Logistics GmbH
Am Frauwald 1
65510 Idstein

Represented by the management:
Horst Gutermann, Andreas Malorny
Mail: infoPL@dg-nexolution.de

You can contact our data protection officer as follows:
Mail: datenschutz@dg-nexolution.de

1.2 Surfing on our website

In principle, you can visit our website without telling us who you are. We then only learn:

• your IP address,
• the name of the website or file accessed and the time of retrieval,
• the browser version used,
• the operating system used,
• the amount of data transferred and
• whether the retrieval or retrieval was successful.

The data is used exclusively for the administration and optimization of the Internet offer.
The IP address can be a personal date because, under certain conditions, it is possible to obtain the identity of the owner of the internet access used by providing information to the respective internet service provider.

We only evaluate the IP address in the event of attacks on our internet infrastructure in order to identify anonymous users for us beforehand. In this case, we have a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR in the processing of the IP address. This legitimate interest arises from the need to fend off the attack on the internet infrastructure, to determine the origin of the attack, in order to be able to take criminal and civil action against the person responsible, and to effectively prevent further attacks. The IP address is recorded anonymously. Therefore, it is no longer possible to draw conclusions about the user's identity.

2 Use of cookies

Cookies are also used within our website. Cookies are small data packets that are stored on your computer's hard drive via the browser. They are used to control the internet connection during your visit or during a later visit to our websites and thus make the visit more comfortable for you. We use cookies to give you the best experience on the website. These include cookies that are necessary for the operation of the site and the control of our commercial business objectives, as well as those that are only used for anonymous statistical purposes, for comfort settings or to display personal content.

2.1 Technical cookies

Technically necessary cookies are needed for the basic functions of the website. The use of technical cookies on the website is possible without your consent in accordance with Art. 6 para. 1 lit. f) GDPR. For this reason, technical cookies cannot be deactivated or activated individually.

2.2 Comfort Cookies

These cookies are used to make the shopping experience even more appealing, for example for the recognition of the visitor. These cookies are stored persistently, meaning long-term, in order to make working with the application more comfortable for you, i.e. in particular that a notepad filled by you remains. Comfort cookies are only used after your consent. You can revoke your consent at any time with effect for the future by calling up the cookie settings under “Information” and changing your selection there.

2.3 Statistics & tracking

These cookies are used to collect data about user behavior. Statistics & tracking cookies are persistent cookies. Statistics & tracking cookies are only used after your consent. You can revoke your consent at any time with effect for the future by calling up the cookie settings under “Information” and changing your selection there.

2.4 Management and deletion of all cookies

You can decide for yourself which cookies you want to allow. Manage your cookie settings under “Information” and change the selection there. In addition, you can configure your internet browser to store cookies. Some browsers already allow cookies in the default setting. If you do not want this, you can change the setting of your browser. Please refer to the information of the browser manufacturer how this is done. If you decide against cookies, it may happen that parts of our Website cannot be used.

2.5 Google Tag Manager

If you have given your consent, Google Tag Manager is used on this website to centrally integrate and manage code sections of tracking tools. A service of Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
Google Tag Manager uses cookies that are used to trigger tags and/or transmit information to tracking tools. The data collected for tagging does not allow any conclusions to be drawn about the user's identity. The service triggers other tags, which in turn may collect data. The tool itself does not store or access any personal data.

Purposes of processing
On behalf of the operator of this website, Google will use this information to trigger tags and connect tracking tools (Google Analytics, Google Ads).

Receiver
The recipient of the data is

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

as a processor. Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google.

Transfer to third countries
A transfer of data to the USA cannot be excluded.

Storage period
The data sent by us and linked to cookies will be automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by not giving your consent to the setting of the cookie. You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, functionality on this and other websites may be restricted.

Legal basis and possibility of revocation
Your consent, Art.6 para.1 sentence 1 lit. a) GDPR, is required for this data processing. You can revoke your consent at any time with effect for the future by calling up the cookie settings under Information and changing your selection there.
Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de
For more information about data security, see: https://support.google.com/tagmanager/answer/9323295?hl=de

2.6 Google Analytics
Insofar as you have given your consent, Google Analytics, a web analytics service provided by Google LLC, is used on this website. The service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

We use the function 'anonymizeIP' (so-called IP-masking): Due to the activation of IP anonymization on this website, your IP address will be truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.

During your visit to the website, the following data will be collected, among others:

• the pages you have accessed, your "click path"
• Achieving "website goals" (conversions, e.g. newsletter registrations, downloads, purchases)
• Your user behavior (e.g. clicks, dwell time, bounce rates)
• Your approximate location (region)
• Your IP address (in abbreviated, anonymized form)
• technical information about your browser and the devices you use (e.B. voice setting, screen resolution)
• Your Internet service provider
• the referrer URL (through which website/ which advertising medium you came to this website)

Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your (pseudonymous) use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

Recipient
The recipient of the data is

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

as a processor. Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google.

Transmission to third countries
A transfer of data to the USA cannot be excluded.

Storage time
The data we send and link to cookies will be automatically deleted after 14 months. The deletion of data whose retention period has been reached is done automatically once a month.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by:
a) not giving your consent to the setting of the cookie, or
b) downloading and installing the browser add-on to disable Google Analytics HERE.
You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, you may experience restrictions on functionality on this and other websites.

Legal basis and revocation possibility
For this data processing is your consent, Art.6 sec.1 S.1 lit. a) GDPR. You can revoke your consent at any time with effect for the future by accessing the cookie settings under Information and changing your selection there.
For more information about Google Analytics Terms of Service and Google Privacy, see https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de and https://policies.google.com/?hl=de.

2.7 Google Ads

2.7.1 Google Ads Conversion-Tracking
If you have given your consent this website uses Google Ads Conversion Tracking, a web analysis service provided by Google LCC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
If you click on an ad placed by Google, a cookie for conversion tracking will be stored on your device. These ads cookies make it possible to recognize your Internet browser if you have clicked on one of our advertisements and have been redirected to our pages. These ads cookies are not used to identify you personally. Each Ads customer is assigned a different cookie. This means that cookies cannot be tracked via the websites of Ads customers. The information collected with the help of the ads cookie is used for the purpose of creating statistical evaluations. We do not collect or process any personal data.

Purposes of processing
We use the online advertising program Google Ads Conversion to draw attention to our offers with the help of advertisements (so-called Google Ads).

Recipient
The recipient of the data is

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

as a processor. For this purpose, we have concluded an order processing contract with Google. Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google.

Transmission to third countries
A transfer of data to the USA cannot be excluded.

Storage time
The data sent by us and linked to cookies will be automatically deleted after 2 years. The deletion of data whose retention period has been reached takes place automatically once a month.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by not giving your consent to the setting of the cookie.
You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, functionality on this and other websites may be restricted.

Legal basis and revocation possibility
For this data processing, your consent, Art.6 para.1 sentence 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future by calling up the cookie settings under Information and changing your selection there. You have the option to block or disable unwanted ads. For instructions, see: https://support.google.com/ads/answer/2662922?hl=de. Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

2.7.2 Google Ads Remarketing
If you have given your consent, this website uses Google Ads Remarketing, a web analysis service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
Google Ads Remarketing uses cookies to identify visitors to our websites on other websites, within the Google advertising network and to display advertisements based on their interests. These cookies collect anonymous data about website usage. The cookies are used to uniquely identify a web browser on a specific device and not to identify a person.

Purposes of processing
On behalf of the operator of this website, Google will use this information to use the remarketing function or "similar target groups" function and thus display advertisements to visitors to our website on other websites, within the Google advertising network, based on their interests.
Recipient

The recipient of the data is

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

as a processor. For this purpose, we have concluded an order processing contract with Google. Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google.

Transmission to third countries
A transfer of data to the USA cannot be excluded.

Storage time
The data sent by us and linked to cookies will be automatically deleted after 540 days. The deletion of data whose retention period has been reached takes place automatically once a month.
Legal basis and possibility of revocation for this data processing is your consent, Art.6 para.1 sentence 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future by
a) go to the cookie settings under Information and change your selection there. You can object to the processing of data concerning you
b) by setting your browser software accordingly, in particular the suppression of third-party cookies, means that you do not receive advertisements from third parties;
c) by installing the plug-in provided by Google under the following link: https://www.google.com/settings/ads/plugin ;
d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin ,
Further information on data protection at Google can be found here: https://policies.google.com/technologies/ads and https://services.google.com/sitestats/de.html

2.8 Hotjar
If you have given your consent, this website uses Hotjar, a web analytics service provided by Hotjar Limited (St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta).

Scope of processing
Hotjar works with cookies and other technologies to collect information about the behavior of our users and about their devices. This includes, in particular, the IP address of the device, which is only collected and stored in anonymous form, the screen size, the device type, information about the browser used, the location (country only) and the preferred language for displaying our website. Hotjar stores this information in a pseudonymised user profile. The information is neither used by Hotjar nor by us to identify individual users or merged with other data about individual users.

Purposes of processing
We use Hotjar to better understand the needs of our users and to optimize the offer on this website.  With the help of Hotjar's technology, we get a better understanding of our users' experiences on our website, so that we can align our offer with the feedback of our users.

Recipient
The recipient of the data is Hotjar Limited, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta

Storage time
The cookies set by Hotjar are stored for 12 months and then deleted.

Legal basis and revocation possibility
Your consent, Art.6 para.1 sentence 1 lit. a) GDPR, is required for this data processing. You can revoke your consent at any time with effect for the future by calling up the cookie settings under Information and changing your selection there. You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, functionality on this and other websites may be restricted. Further information can be found in Hotjar's privacy policy here.

2.9 Google Maps
If you have given your consent, this website uses Google Maps API, a map service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"), to display an interactive map. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
Google Maps is an online map service and allows geocoding of store addresses, searching for stores and displaying store locations. The information collected by means of cookies is usually transmitted to a Google server in the USA and stored there.
During your visit to the website, the following data is collected, among others:

• Data about the use of the Maps functions
• Your IP address (in abbreviated, anonymized form)
• Location data, if applicable

Purposes of processing
On behalf of the operator of this website, Google will use this information to provide you with an interactive map to search for a branch and to show you how to get to a branch. The map provided by Google Maps is used to optimize our online service. We only use Google Maps if you have given your consent.

Recipient
The recipient of the data is

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google.

Transmission to third countries
A transfer of data to the USA cannot be excluded.

Storage time
The data sent by us and linked to cookies will be automatically deleted after 180 days. The deletion of data whose retention period has been reached takes place automatically once a month.

Legal basis and revocation possibility
For this data processing, your consent is required in accordance with Art. 6 (1) sentence 1 lit. a) GDPR.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by not giving your consent to the setting of the cookie under comfort functions.
You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, functionality on this and other websites may be restricted.
Further information on the terms of use of Google Maps and data protection at Google can be found at https://www.google.com/intl/de_de/help/terms_maps/ and unter https://policies.google.com/terms?hl=de

3 Contacting and communication

On some pages you can enter the personal data provided there for the purpose of correspondence with us in input fields or we refer to e-mail addresses that are used to contact us.
This data will only be processed for this correspondence with you and for the purpose for which you have provided us with the data in the course of this communication, such as to process your enquiries or to contact you at your request. In this case, the processing of the personal data takes place with your consent and is then permitted in accordance with Art. 6 sec. 1 lit. a) GDPR. We delete your data in this regard if the purpose for which you have provided us with your data has been fulfilled or completed and we are not entitled or obliged to further store it for legal reasons within 90 days.

4 Creating and retrieving a profile

In certain areas of our website, you also have the option of voluntarily creating a profile for yourself, storing data there and retrieving it again if necessary. In such profiles, the data you enter and the results of the actions you have initiated (e.g. calculations) are then stored and are available for you to retrieve.

If you provide all information, the following information may be stored in a profile within the scope of our website:

• title
• forename
• surname
• e-mail address
• street
• postal code
• city
• country
• company
• VAT ID

In no case will usage data be stored. Your profiles are based solely on your details. Automated profiling by us due to your behavior or other information does not take place.

If you create a profile on our website, a contract is concluded between us for the storage and maintenance of the respective profile. The processing of your personal data is therefore legitimate under Article 6 (1) lit.b) GDPR. In principle, we do not delete your personal data stored in a profile in an independent way. However, you have the possibility to change or delete individual data in your profile at any time as well as to delete the created profile completely, thereby deleting all personal data stored there at the same time.

5 Disclosure of data to third parties for the fulfilment of the contract

5.1 Transfer to shipping service provides
For the delivery of goods, we pass on personal data to service providers (third parties) to the minimum required, insofar as this is necessary for the implementation of pre-contractual measures.
The transfer of data to a shipping service provider

• DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn)
  The data protection provisions of Deutsche Post AG can be viewed under https://www.dhl.de/de/toolbar/footer/datenschutz.html .
  

• DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg)
  The data protection regulations of DPD Deutschland GmbH can be viewed under https://www.dpd.com/de/de/datenschutz/ .

is based on Art. 6 para. 1 lit f) of the GDPR. In order to avoid incorrect delivery and to design the delivery time and place in a customer-friendly manner, your e-mail address will be transmitted to the shipping service provider for announcement purposes. The legal basis for this is Article 6 (1) (f) of the GDPR.

5.2 Marketplace/Bank-owned articles
If the goods purchased by you are shipped directly by the marketplace participant/bank, we will pass on the data on the ordered goods and their personal data to them, to the minimum extent necessary, so that the goods can be shipped to you. The legal basis for this is Article 6 (1) (.b) of the GDPR. From which company the goods are shipped you can find out the article detail page.

5.3 Payments
To process the payment, we have commissioned the payment service provider Novalnet AG, Feringastraße 4, 85774 Unterföhring. For the purpose of executing the chosen payment method, we will forward the personal data provided to you when ordering to Novalnet. The data processing by Novalnet is necessary for the fulfilment of contracts, the legal basis is in accordance with Art. 6 paragraph 1 lit.b) GDPR. Depending on the payment method, we forward your payment information to third parties (e.B. PayPal) and are therefore entitled to process your data in accordance with Art. 6 paragraph 1 lit.b) GDPR. The data protection regulations of Novalnet AG can be viewed under https://www.novalnet.de/datenschutz.

PayPal
When paying via PayPal, we will forward your payment details to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal reserves the right to carry out a credit report for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. The result of the credit check with regard to the statistical probability of default PayPal used for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values. For further information on data protection law, including on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

giropay
When paying via giropay, we will forward your payment data to paydirekt GmbH, Stephanstraße 14-16, 60313 Frankfurt am Main.
The payment data (e.B. payment amount, details of the payee) as well as the confirmation of the participant as to whether the payment data is correct are collected, processed and transmitted to the bank by paydirekt GmbH to carry out the payment. paydirekt GmbH authenticates the payment via the authentication procedure stored for the participant. The bank authorises the payment to us with the involvement of paydirekt GmbH. paydirekt GmbH collects and stores the transaction data of paydirekt payments. For the processing of refunds, transaction data is transmitted by paydirekt GmbH to the bank. Further information can be found in the paydirekt GmbH privacy policy at: https://www.giropay.de/rechtliches/datenschutzerklaerung

Immediate transfer
When paying via immediate transfer, we will forward your payment data to Klarna GmbH, Theresienhöhe 12, 80399 Munich. Further information can be found in Klarna Sofort's privacy policy: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de

6 Consent

In principle, your personal data will only be processed beyond this if you have given us your consent to this and we are therefore entitled to process your personal data in accordance with Article 6 (1) (a) GDPR. In some areas of our website, you have the option of giving such express consent. In doing so, we will inform you of the purpose for which the data will be processed in the event of your consent and how long we will store this personal data.

Other processing based on a legitimate interest
If necessary, we process your data beyond the actual performance of a contract concluded with you or a consent given by you to safeguard the legitimate interests of us or third parties, unless a balancing act in individual cases shows that your legitimate fundamental rights and freedoms that require the protection of personal data prevail (cf. Art. 6 para. 1 lit. F) GDPR). These may include:

• Assertion of legal claims and defence in legal disputes;
• Ensuring the IT security and IT operations of GenoLog GmbH;
• prevention and investigation of criminal offences;
• Measures for business management and further development of services and products.

7 Your rights as a user ofer our website

Every person has the right to receive information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure (right to be forgotten) under Article 17 GDPR, the right to restrict processing under Article 18 GDPR and the right to data portability under Article 20 GDPR. In the case of the right of access and the right of cancellation, the restrictions under §§ 34 and 35 of the German Data Code (BDSG) apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR i.V. v.m. § 19 of the German Federal Data Protection Act (BDSG). You can reach the supervisory authority responsible for Hesse at: The Hessian Data Protection Supervisor, P.O. Box 3163, 65021 Wiesbaden. You can also contact our data protection officer (GenoLog GmbH, data protection officer, phone (06 11) 50 66-12 71, mail: datenschutz@dg-nexolution.de) at any time if you have any questions regarding data protection law.

7.2 Enforcement of your rights

The assertion of all rights mentioned herein is in principle free of charge for you.
However, in the case of manifestly unfounded or, in particular, in the case of frequent repetition, excessive applications, we may, in accordance with Article 12(5) GDPR, either:
a) require an appropriate remuneration taking into account the administrative costs of informing, communicating or implementing the action requested;
b) we refuse to act on the basis of the application.
Please contact datenschutz@dg-nexolution.de to exercise your rights. When required you can also receive further information on data protection.

8 Updating this privacy policy

From time to time, it may be necessary to update this data protection information, for example due to new legal or official requirements as well as new offers on our website. We will then inform you at this point. In general, we recommend that you regularly visit this privacy policy to check whether there have been any changes. You can see whether changes have been made, among other things, by the fact that the status stated at the bottom of this document has been updated.

9 Printing and saving this privacy policy

You can print and save this privacy notice immediately, for example through the print or storage function in your browser.