Data protection

ValorCompany Privacy Policy

The processing of personal data (e.g. name, address, e-mail address or telephone number of a data subject) is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to us.

With the following privacy policy, we would like to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. This privacy policy also informs data subjects about their rights.

As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed through our website. However, data transmissions over the internet may inherently contain security gaps. Therefore, 100% protection cannot be guaranteed. Therefore, any data subject can, of course, alternatively transmit personal data to us, for example, by telephone.

1. Definitions
This privacy policy is based on the definitions used by the European legislator for the adoption of the GDPR (Article 4 GDPR). This privacy policy is intended to be both easy to read and understand for everyone. To ensure this, we would first like to explain the terms used. Among other things, the following definitions are used in this privacy policy:

• “personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

• “data subject” means any identified or identifiable natural person whose personal data are processed by the controller.

• “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

• ‘restriction of processing’ means the marking of stored personal data with the aim of limiting their future processing;

• “Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

• "controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

• 'recipient' means a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be considered recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules and in accordance with the purposes of the processing;

• “third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorised to process personal data under the direct authority of the controller or processor;

• “Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and contact details of the controller
This privacy policy applies to data processing by:
Responsible:

3. Collection and storage of personal data and the nature and purpose of their use
a) When you visit the website
You can generally use our website without revealing your identity. When you visit our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
We process the above data for the following purposes:
• Ensuring a smooth connection to the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability as well as
• for further administrative purposes.

The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances will we use the collected data to draw conclusions about you personally.
In addition, we use cookies and analytics services when you visit my website. Further information can be found in sections 5 and 7 of this privacy policy.

b) When using our contact form
If you have any questions, you can contact us using a form provided on our website. You must provide a valid email address so that we know who sent the inquiry and can respond to it. You can provide additional information voluntarily. It is your free choice whether you wish to enter this information in the contact form.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntarily given consent.

The personal data we collect when you use the contact form will be automatically deleted after your request has been processed.

c) For orders via our website
You can either place orders on our website as a guest without registering, or register as a customer in our shop for future orders. Registration has the advantage that you can log in to our shop directly with your email address and password for future orders without having to enter your contact information again.

Your personal data will be entered into an input mask and transmitted to us and stored. When you place an order through our website, we initially collect the following data, both in the case of a guest order and when registering in the shop:

• Title, first name, last name,
• a valid email address,
• Address,
• Telephone number (landline and/or mobile)
This data is collected
• to identify you as our customer;
• to process, fulfill and handle your order;
• to correspond with you;
• for invoicing;
• to process any liability claims that may arise and to assert any claims against you;
• to ensure the technical administration of our website;
• to manage our customer data.
As part of the ordering process, your consent to the processing of this data will be obtained.

The data processing takes place in response to your order and/or registration and is necessary according to Art. 6 (1) (b) GDPR for the stated purposes for the appropriate processing of your order and for the mutual fulfillment of obligations arising from the purchase contract.

The personal data collected by us for the processing of your order will be stored until the end of the statutory retention period and then deleted, unless we are obliged to store the data for a longer period in accordance with Article 6 (1) (c) GDPR due to retention and documentation obligations under tax and commercial law (from the German Commercial Code, the German Criminal Code or the German Fiscal Code) or you have consented to longer storage in accordance with Article 6 (1) (a) GDPR.

4. Sharing of data
We will only share your personal data with third parties involved in the contract execution, such as the logistics company responsible for delivery and the credit institution responsible for payment matters. However, if your personal data is shared with third parties, the scope of the data transmitted is limited to the minimum necessary.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or "purchase on account" via PayPal, we will pass your payment data on to PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or "purchase on account" via PayPal. PayPal uses the result of the credit check regarding the statistical probability of default to decide whether to provide the respective payment method. The credit check may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. Further information on data protection can be found in the PayPal privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Your personal data will not be transferred to third parties for purposes other than those stated above.
We will only share your personal information with third parties if:
• You have given your express consent in accordance with Art. 6 (1) (a) GDPR,
• the transfer is necessary according to Art. 6 (1) (f) GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not transferring your data,
• in the event that there is a legal obligation to transfer data in accordance with Art. 6 (1) (c) GDPR, and
• this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 (1) (b) GDPR.
As part of the ordering process, your consent will be obtained to pass on your data to third parties.

5. Use of cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.
The cookie stores information related to the specific device used. However, this does not mean that we directly know your identity.

The use of cookies serves, on the one hand, to make using our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
In addition, we also use temporary cookies to optimize user experience. These cookies are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already visited us and the entries and settings you have made, so you don't have to enter them again.
We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you (see Section 7). These cookies enable us to automatically recognize that you have already visited our site when you visit it again. These cookies are automatically deleted after a defined period of time.
The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR.
Most browsers automatically accept cookies. However, you can configure your browser to refuse cookies or to always prompt you before a new cookie is created. However, completely disabling cookies may prevent you from using all the features of our website.

6. Links to third-party websites
The links published on our website are researched and compiled by us with the greatest possible care. However, we have no influence on the current and future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not adopt the content of these pages as our own. The provider of the website to which reference is made is solely liable for illegal, incorrect or incomplete content as well as for damages resulting from the use or non-use of the information. The liability of the person who merely refers to the publication through a link is excluded. We are only responsible for third-party references if we have positive knowledge of them, i.e. also of any potentially illegal or criminal content, and if it is technically possible and reasonable for us to prevent their use.

7. Analysis and tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) (f) GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. We also use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you. These interests are considered legitimate within the meaning of the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
a) Google Analytics1
For the purpose of tailoring our website to meet your needs and continuously optimizing it, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). In this context, pseudonymized user profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website, such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Hostname of the accessing computer (IP address),
• Time of the server request,

are transmitted to a Google server in the USA and stored there. This information is used to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of these websites. This information may also be transferred to third parties if required to do so by law or if third parties process this data on Google's behalf. Under no circumstances will your IP address be merged with other data held by Google. IP addresses are anonymized so that assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the aforementioned link. This will set an opt-out cookie that prevents the future collection of your data when you visit our website. The opt-out cookie is valid only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
For more information on data protection in connection with Google Analytics, please see the following link in the Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=de

b) Google Adwords Conversion Tracking
We also use Google Conversion Tracking to statistically record the use of our website and evaluate it for the purpose of optimizing our website for you. Google Adwords places a cookie (see section 5) on your computer if you accessed our website via a Google ad.
These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page.
Each AdWords customer receives a different cookie. Cookies cannot therefore be tracked across AdWords customers' websites. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this purpose – for example, by setting your browser to generally deactivate the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com." Google's privacy policy on conversion tracking can be found at the following link: https://services.google.com/sitestats/de.html

8. Social Media Plugins
Based on Art. 6 (1) (f) GDPR, we use social network plugins (e.g., Facebook, Twitter, Google+) on our website to raise awareness of our company. The underlying advertising purpose is considered a legitimate interest within the meaning of the GDPR. Responsibility for ensuring compliance with data protection regulations rests with the respective providers. We integrate these plugins using the so-called two-click method to best protect visitors to our website.

a) Facebook
Our website uses social media plugins from Facebook to personalize its use. For this purpose, we use the "LIKE" or "SHARE" button. This is a service provided by Facebook.
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which then integrates it into the website.
By integrating the plug-in, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you don't have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plug-ins, for example, by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook for everyone to see.
Facebook may use this information for the purposes of advertising, market research, and tailoring Facebook pages to meet your needs. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook.
If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting my website.
For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy policy, in particular its data policy, which you can view at the following link: https://www.facebook.com/about/privacy/

b) Twitter
Our website integrates plug-ins from the short message network of Twitter Inc. (Twitter). You can recognize the Twitter plug-in (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found at this link on Twitter: https://dev.twitter.com/web/tweet-button
When you visit a page on our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter thus receives the information that you have visited our page using your IP address. If you click the Twitter "tweet button" while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or how Twitter uses it.
If you do not want Twitter to be able to associate your visit to our website, please log out of your Twitter account.
For further information, please see Twitter's privacy policy, which you can view here: https://twitter.com/de/privacy

c) Google “+1” button
Our website uses the "+1" button of the social network Google, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. The button is marked with a "+1."
The "+1" button is shorthand for "that's pretty cool" or "check this out." The button is not used to track your web visits.
If a web page on our website contains the "+1" button, your browser will load and display this button from the Google server. The page on our website you visited is automatically communicated to the Google server. When a +1 button is displayed, Google does not permanently log your browsing history, but only for a period of up to two weeks.

Google retains this data about your visit for this period for system maintenance and troubleshooting purposes. However, this data is not structured according to individual profiles, user names, or URLs. This information is also not accessible to website publishers or advertisers. This information is used solely for maintenance and troubleshooting of Google's internal systems. Your visit to a page with a +1 button is not evaluated by Google in any other way.

There will be no further analysis of your visit to a website on our website with a “+1” button.
The +1 itself is a public process, meaning anyone who performs a Google search or visits content you've +1'd can potentially see that you've +1'd that content. Therefore, only +1 if you're absolutely sure you want to share this recommendation with the world.

Clicking this +1 button serves as a recommendation for other users in Google's search results. You can publicly announce that you like our website, approve of our website, or recommend our website. If you are registered for Google+ and logged in, the +1 button will turn blue when clicked. The +1 will also be added to the +1 tab in your Google profile. On this tab, you can manage your +1s and decide whether you want to make the +1 tab public.

To save your +1 recommendation and make it publicly accessible, Google collects information about the URL you recommended, your IP address, and other browser-related information from your profile. If you revoke your +1, this information will be deleted. All of your +1 recommendations are listed in the +1 tab in your profile.

Further information and Google's applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/. Further information from Google regarding the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy

9. Rights of data subjects
You have the right:
• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from me, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;

• to request the immediate correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
• to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;
• to revoke your previously granted consent at any time in accordance with Art. 7 (3) GDPR. This means that we may no longer continue the data processing based on this consent in the future and
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.

10. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to: info@valorcompany.de

11. Data security
During your visit to our website, we use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted encrypted by the closed key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

12. Currentness and changes to this privacy policy
This privacy policy is currently valid and is dated March 2018.
Due to the ongoing development of our website and its offerings, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on our website using the following link:

___________________________________________________________________________
1 Data protection authorities require the conclusion of a data processing agreement for the permissible use of Google Analytics. A corresponding template is available from Google at http://www.google.com/analytics/terms/de.pdf.

Source: Sample privacy policy created by attorney Andreas Gerstel (http://www.anwaltblog24.de/)