data protection

Paul Elsdörfer&Söhne GbR, Managing Director: Paul Elsdörfer,

Fröttmaningerstraße 2, 80805 Munich

allprivacy Information Policy

Privacy Notice

the Paul Elsdörfer&Söhne GbR, Managing Director: Paul Elsdörfer, Fröttmaningerstraße 2,

80805 Munich

Content:

.a href="#_Toc516068328">Name and contact details of the responsible body. 2

a href="#_Toc516068329">General Data Processing. 2

  1. a href="#_Toc516068330"> Scope of processing of personal data. 2
  2. a href="#_Toc516068331"> Legal basis for the processing of personal data. 3

a href="#_Toc516068332">III. Data erasure and storage time. 3

  1. a href="#_Toc516068333"> Collection and storage of personal data; Type, purpose and use. 3
  2. a href="#_Toc516068334"> Transfer of data to third parties. 4
  3. a href="#_Toc516068335"> Your rights as a data subject. 4

a href="#_Toc516068336">VII. Your right to object. 9

a href="#_Toc516068337">Providing the Website and Creating Logfiles. 9

a href="#_Toc516068338">VIII. Description and scope of data processing. 9

  1. a href="#_Toc516068339"> Legal basis for data processing. 10
  2. a href="#_Toc516068340"> Purpose of data processing. 10
  3. a href="#_Toc516068341"> Duration of storage. 11
  4. a href="#_Toc516068342"> Possibility of objection and disposal. 11
  5. a href="#_Toc516068343"> Use of cookies. 11
  6. a href="#_Toc516068344"> Description and scope of data processing. 11
  7. a href="#_Toc516068345"> Legal basis for data processing. 13
  8. a href="#_Toc516068346"> Purpose of data processing. 13
  9. a href="#_Toc516068347"> Duration of storage, possibility of objection and disposal. 14
  10. 's #_Toc516068348 registration. 14
  11. a href="#_Toc516068349"> Description and scope of data processing. 14
  12. a href="#_Toc516068350"> Legal basis for data processing. 14
  13. a href="#_Toc516068351"> Purpose of data processing. 15
  14. -a href="#_Toc516068352"> Duration of storage. 15
  15. a href="#_Toc516068353"> Possibility of objection and disposal. 16
  16. .a href="#_Toc516068354"> Contact form and e-mail contact. 16
  17. a href="#_Toc516068355"> Description and scope of data processing. 16
  18. -a href="#_Toc516068356"> Legal basis for data processing. 17
  19. a href="#_Toc516068357"> Purpose of data processing. 17
  20. -a href="#_Toc516068358"> Duration of storage. 17
  21. a href="#_Toc516068359"> Possibility of objection and disposal. 18

.a name="_Toc516068328">name and contact details of the responsible body

This Privacy Policy applies to us

Paul Elsdörfer&Söhne GbR,

Managing Director: Paul Elsdörfer,

Fröttmaningerstraße 2.

80805 Munich

•p>Phone: 089 365947

Fax: 089 36102315

e-mail: blumen@elsdoerfer.com

as responsible.

"a name="_Toc516068329">General information about data processing

.a name="_Toc516068330">I.          Scope of processing of personal data

We only process the personal data of our users insofar as this is necessary for the provision of a functional website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.

a name="_Toc516068331">II. Legal basis for the processing of personal data

Inso long as we obtain the consent of the data subject for processing of personal data, Article 6(1) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1) lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

To the extent that processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6(1) of the GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1) of the GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former interest, Article 6(1) of the GDPR serves as the legal basis for the processing.

•a name="_Toc516068332">III. Data erasure and storage time

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is omitted. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data shall also be blocked or deleted if a storage period prescribed by the above-mentioned standards expires, unless there is a need for further storage of the data for the conclusion of a contract or a performance of the contract.

(a name="_Toc516068333">IV. Collection and storage of personal data; Type, purpose and use

When you contact us, the following information will be collected:

salutation, title, first name, last name

address

e-mail address

telephone number (landline and/or mobile)

fax number (if any&requested)

account information, if any

date of birth, if any

In addition, all information necessary for the performance of the contract with you is collected.

The collection of personal dataisis

- to identify you as a customer;

- to give you appropriate advice;

- to be able to fulfil our contractual obligations to you;

- in order to be able to meet our legal obligations:

- to correspondence with you;

for invoicing or, if applicable, in the context of dunning;

- for the purposes of theen Direct mail;

- to assert any claims against you.

The processing of personal data takes place on the occasion of your request to us and is necessary for the aforementioned purposes for the processing of your order and for the fulfilment of obligations under the underlying contract.

The personal data collected will be stored until the expiry of the statutory retention obligation for merchants (6, 8 or 10 years after the end of the calendar year in which the contractual relationship was terminated) and subsequently deleted. Exceptionally, this does not apply if we are obliged to store for a longer period of time due to tax or commercial liability (according to the German Commercial Code (According to the German Commercial Code of Germany, StGB or AO) or if you have consented to further storage.

.a name="_Toc516068334">V.       Disclosure of data to third parties

In principle, your personal data will not be transferred to third parties. Exceptions to this shall only apply to the extent necessary for the execution of contractual relationships with you. This includes in particular the transfer to service providers (so-called processors) or other third parties whose activities are necessary for the execution of the contract (e.g. shipping companies or banks). The data passed on may only be used by the third parties for the stated purposes.

.a name="_Toc516068335">VI. Your rights as a data subject

As a data subject, you have various rights:

right of withdrawal:

You can revoke your consent severed to us at any time. The data processing, which is based on the revoked consent, may then no longer be continued for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

right of access:

You can request information about your personal data processed by us. This applies in particular to the purposes of data processing, the categories of personal data, possibly the categories of recipients, the storage period, if applicable the origin of your data and, if applicable, the existence of automated decision-making including profiling and, where applicable, meaningful information on their details.

You may require the controller to confirm whether we process personal data concerning you.

If such processing is present, you can request information from the controller for the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data that are processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or is still being disclosed;

(4) the planned duration of the storage of the personal data concerning you or, if specific information is not possible, criteria for determining the retention period;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal with a supervisory authority;

(7) all available information on the origin of the data if the personal data are not collected from the data subject;

(8) the existence of automated decision-making, including profiling, in accordance with Article 22(2) 1 and 4 GDPR and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject.

You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees under Article 46 GDPR in connection with the transmission.

- Rectification Law:

You may request the correction of incorrect or the completion of your personal data stored by us.

You have a right to rectification and/or completion to the controller if the personal data you have been processed is incorrect or incomplete. The person responsible must make the correction without delay.

- Right of erasure:

You may request the deletion of your personal data stored by us, insofar as their processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

You can require the controller to delete the personal data concerning you immediately, and the controller is obliged to delete this data immediately, provided that one of the following reasons applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent, on which the processing was based in accordance with Art. 6 sec. 1 lit. a or Art. 9 sec. 2 lit. a GDPR, and there is no other legal basis for the processing.

(3) You object to the processing in accordance with Art. 21 sec. 1 GDPR and there are no primary legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 sec. 2 GDPR.

(4) The personal data concerning you have been processed unlawfully.

(5) The erasure of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data concerning you have been collected in relation to information society services offered in accordance with Article 8(1) GDPR.

If the controller has made the personal data concerning you public and is obliged to delete it in accordance with Article 17(1) GDPR, he shall take appropriate measures, including technical measures, including technical measures, to inform data controllers who process the personal data that you, as a data subject, have deleted from them the deletion of all links to this personal data or copies or replicas. of this personal data.

The right to erasure does not exist to the extent that processing is necessary

(1) on the exercise of the right to freedom of expression and information;

(2) to fulfil a legal obligation requiring processing under the law of the Union or of the Member States to which the controller is subject, or for carrying out a task which is in the public interest or carried out in the exercise of official authority delegated to the controller;

(3) for reasons dpublic interest in the field of public health in accordance with Article 9(2) of the lit. h and i and Article 9(3) GDPR;

(4) for archival purposes, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Article 89(1) GDPR, in so far as the right referred to in section (a) is likely to make the achievement of the objectives of such processing impossible or seriously impaired, or

(5) to assert, exercise or defend legal claims.

right to information:

If you assert edyour sit the right to rectify, delete or restrict the processing to the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been notified of this correction or deletion of the data or restriction of the processing, unless this proves impossible or entails a disproportionate effort.

You have the right to be informed of these recipients.

- Right to restrict processing:

You may request the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it. You also have this right if we no longer need the data, but you need it to assert, exercise or defend legal claims. In addition, you have this right if you have objected to the processing of your personal data;

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or

(4) if you have objected to the processing in accordance with Article 21(1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you is restricted, such data may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

If the restriction of processing according to the above conditions is restricted, you will be informed by the controller before the restriction is lifted.

- Right to data portability:

You may request that we provide you with the personal data you have provided to us in a structured, common and machine-readable format. Alternatively, you can request the direct transmission of the personal data you provide to us to another controller as far as possible.

- Right of appeal:

You can complain to the supervisory authority responsible for us, e.g. if you believe that we have your personalprocessed in an unlawful manner. The authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 27

91522 Ansbach

Phone: +49 (0) 981 53 1300

Telefax: +49 (0) 981 53 98 1300

email: poststelle@lda.bayern.de

- Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance by the controller to whom the personal data was provided, provided

(1) the processing is based on consent in accordance with Article 6 (1) lit. a GDPR or Art. 9 sec. 2 lit. a GDPR or on a contract pursuant to Art. 6 sec. 1 lit. b GDPR and

(2) the processing is carried out using automated procedures.

In the exercise of this right, you also have the right to obtain that the personal data concerning you are transferred directly by one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

"a name="_Toc516068336">VII. Your right to object

If we process your personal data on the basis of a legitimate interest, you have the right to object to such processing. If you wish to exercise your right to object, a text message is sufficient. You are welcome to write to us, send us a fax or contact us by e-mail. Our contact details can be found under point 1 of this privacy policy.

You have the right to object at any time to the processing of personal data concerning you, which is based on Article 6 (1) lit. e or F GDPR, for reasons arising from your particular situation; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you, unless he can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling as far as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the opportunity to exercise your right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

_Toc516068337 providing the website and creating log files

a name="_Toc516068338">VIII. Description and scope of data processing

The processing of certain personal data, including the IP address of the website visitors, is also carried out via our website under https://blumen-elsdoerfer.de/. Additional data protection notices can therefore be found online at https://blumen-elsdoerfer.de/datenschutz.

Every time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The following data are collected:

information about the browser type and version used

The user's operating system

The user's Internet service provider

The user's IP address

the date and time of access

websites from which the user's system enters our website

websites accessed by the user's system through our website

The data is also stored in the log files of our system. This data will not be stored together with other personal data of the user.

.a name="_Toc516068339">1. Legal basis for data processing

Legal basis for the temporary storage of the data and the log files is Art. 6 sec. 1 lit. f GDPR.

.a name="_Toc516068340">2. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

In these purposes lies also our legitimate interest in the data processing in accordance with Art. 6 sec. 1 lit. f GDPR.

.a name="_Toc516068341">3. Duration of storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is finished.

In the case of the storage of the data in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

.a name="_Toc516068342">4. Possibility of objection and disposal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.

.a name="_Toc516068343">IX. Use of cookies

a name="_Toc516068344">5th description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when you visit the website.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

language settings

items in a shopping cart

log-in information

We also use cookies on our website to analyse users' browsing behaviour.>

In this way, the following data can be transmitted:

Entered search terms

frequency of page views

Use of website features

The data collected in this way by the users are pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.

When you access our website, users are informed about the use of cookies for analysis purposes by means of an information banner and are referred to this data protection declaration. In this context, it is also an indication of how the storage of cookies in the browser settings can be prevented.

When you access our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of the personal data used in this context is obtained. In this context, a reference to this data protection declaration is also made.

.a name="_Toc516068345">6. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 sec. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is in the presence of the user's consent in this respect, Article 6(1) of the GDPR

.a name="_Toc516068346">7th purpose of data processing

The purpose of the use of technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

For the following applications we need cookies:

basket

Adoption of language settings

Remember search terms

The user data collected by technically necessary cookies is not used to create user profiles.

The use of analytics cookies is done for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offer.

For these purposes, our legitimate interest lies in the processing of personal data in accordance with Art. 6 sec. 1 lit. f GDPR.

a name="_Toc516068347">8th time of storage, possibility of objection and disposal

cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, all functions of the website may not be able to be used in full.

The transmission of Flash cookies cannot be prevented by the settings of the browser, but can be prevented by changes in the settings of the Flash Player.

•a name="_Toc516068348">X. Registration

a name="_Toc516068349">1. Description and scope of data processing

On our website, we offer users the opportunity to register with personal data. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties. The following data is used as part of the registration processit raised:

The following data is also stored at the time of registration:

The user's IP address

the date and time of registration

In the context of the registration process, the user's consent to the processing of this data is obtained.

.a name="_Toc516068350">2. Legal basis for data processing

Legal basis for the processing of the data is Article 6(1) of the GDPR,

If the registration of the performance of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 sec. 1 lit. b GDPR.

.a name="_Toc516068351">3. Purpose of data processing

Registration of the user is necessary for the keeping of certain content and services on our website.

A registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.

.a name="_Toc516068352">4th time of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of their collection.

This is the case for the data collected during the registration process if the registration on our website is cancelled or changed.

This is the case for the performance of a contract or for the implementation of pre-contractual measures during the registration process when the data are no longer necessary for the execution of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

.a name="_Toc516068353">5. Possibility of objection and disposal

As a user, you have the option to cancel the registration at any time. You can change the data stored about you at any time.

To have your data deleted, please contact us under 1.

If the data is necessary for the performance of a contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible, unless contractual or legal obligations prevent deletion.

a name="_Toc516068354">XI. Contact form and e-mail contact

a name="_Toc516068355">6. Description and scope of data processing

There is a contact form on our website, which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored. This data is:

name

phone number

email address

address

In addition, the following data is stored when the message is sent:

The user's IP address

the date and time of registration

For the processing of the data, your consent will be obtained during the sending process and reference will be made to this data protection declaration.

Alternatively, it is possible to contact you via the provided e-mail address. In this case, the personal data of the user transmitted with the e-mail will be stored.

In this context, no data will be passed on to third parties. The data will only be used to process the conversation.

.a name="_Toc516068356">7. Legal basis for the dataprocessing

Legal basis for the processing of the data is Article 6(1) of the GDPR,

Legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 sec. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, an additional legal basis for the processing shall be Article 6(1) lit. b GDPR.

.a name="_Toc516068357">8. Purpose of data processing

The processing of personal data from the input mask serves us solely for the purpose of processing the contact. In the event of an e-mail contact, this also has the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

sa name="_Toc516068358">9th time of storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user is terminated. The conversation ends when it can be inferred from the circumstances that the facts in question have been finally clarified.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

.a name="_Toc516068359">10. Possibility of objection and disposal

The user has the possibility to withdraw his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot continue.

All personal data stored during the contact will be deleted in this case.