Privacy

• Dr. Mosetter Prinzip - falcento GmbH, as the operator of this website, is pleased that you have visited our website. In the following, we will inform you about the processing of your personal data when using our website and our web services:
  1. Person responsible for the processing of the data
• The person responsible for data processing on this website is:

falcento GmbH
Obere Laube 44
78462 Konstanz
Germany

Managing Director Dr. med. Kurt Mosetter, Reiner Mosetter
Phone: +49 7531 – 7141-400
E-mail: shop@mosetter.de

• The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar) (Art. 4 No. 7 DSGVO).
  1. Data collection on our website
     1. Provision of the website and creation of log files
        • Description and scope of data processing

• When you use our website for informational purposes only, we automatically process information in so-called server log files during your visit to our website, which your browser automatically transmits to us. These are:
• Information about your browser: browser type and browser version
• operating system used
• Web pages from which your system accesses our website
• host name of the accessing computer
• Date and time of the server request
• IP address
• This data is not merged with other data sources.
  • Legal basis for data processing
• The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f) DSGVO, as our stated legitimate interests in this storage outweigh your interests, fundamental rights and freedoms.
  • Purpose of data processing
• The IP address is considered personal data. The temporary storage of the IP address by the system is necessary to enable the transmission of our website to your browser. For this purpose, the IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of our website. In addition, we use the data to optimize our website and to ensure the security of our information technology systems.
  • Duration of storage
• The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If your data was stored in log files, this is the case after 24 hours. Subsequently, in the case of the IP address, the personal reference is automatically removed by data modification and the IP address is stored in anonymized form for 6 months and then automatically deleted.
  • Possibility of objection and revocation
• The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility for you to object.
  1. Cookies use
     • Description and scope of data processing

• In addition to the above data, we use technical aids for various functions when you use our website, so-called cookies, which can be stored on your terminal device. Cookies are small text files that are stored on your computer and saved by your browser. Cookies serve to make our offer more user-friendly, effective and secure. We use three types of cookies: functional cookies, marketing cookies, analysis cookies and tracking cookies.
• Most of the cookies we use are so-called "session cookies", which are deleted again when the browser window is closed. In addition, permanent cookies are also used. Some elements of our website require that the calling browser can be identified even after a page change.
• We set various optional cookies only after your consent, which you can select during your first visit to our website via the so-called cookie consent tool. The functions are only activated in the event of your consent and serve in particular to enable us to analyze and improve visits to our website, to make it easier for you to use it via different browsers or end devices, to recognize you when you visit it again or to place advertising (possibly also to orient advertising to interests, to measure the effectiveness of ads or to show interest-oriented advertising) or to statistically evaluate our website offering.
• The following data is stored and transmitted in the cookies:
• Session-Informationen (u.a. die Session-ID)
• Security settings
• Website settings
• Log-in-information
  • Legal basis for data processing
• The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests pursuant to Art. 6 (1) p. 1 lit. f) DSGVO, insofar as technically necessary cookies are used, for example to carry out the electronic communication process or to provide certain functions requested by you (e.g. login or shopping cart function).
• The legal basis for the processing of personal data using technically unnecessary cookies is your consent pursuant to Art. 6 (1) lit. a) DSGVO.
  • Purpose of data processing
• The purpose of using technically necessary cookies is to simplify the use of the website for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
• Functional cookies are required for the functionality of the web store.
• Marketing cookies are used to target advertisements individually across multiple page views and browser sessions. Tracking and analysis Cookies help us as a website operator to collect and evaluate information about the behavior of users on our website.
  • Duration of storage
• When you first visit our website, you can select which cookies are used during your visit. In addition, you can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.
• Otherwise, the data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Functional cookies for the provision of functions of our website have a duration of 24 hours.
  • Possibility of objection and revocation
• You can delete cookies that have already been stored at any time by calling up the corresponding menu item in your Internet browser or by deleting the cookies on your hard drive. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
  1. Registration
     • Description and scope of data processing

• You can register on our website to use additional functions on the site. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration. The data is entered in an input mask and transmitted to us and processed. The following data is collected during the registration process:
• Salutation (optional)
• First name, last name
• Company (optional if it is a business customer)
• Complete address details
• E-mail address
• Telephone and mobile phone numbers (optional)
• Date of birth (optional)
• The following data is also processed at the time of registration:
• Timestamp of registration (date and time)
• IP address
• Newsletter selection (optional)
• In the case of orders, the items you have ordered will also be added to your customer account. If you save items to your notepad, this data will be added to your customer account. When the notepad is created, the time stamp (date and time) is processed.
  • Purpose of the data processing
• With your registration, you can manage your customer data and your notepad in particular.
• For important changes, for example in the scope of the offer or in the case of technically necessary changes, we use the e-mail address provided during registration to inform you in this way.
  • Legal basis for data processing
• The legal basis for the processing of data is Art. 6 para. 1 lit. a) DSGVO if the user has given his or her consent. Otherwise, this is Art. 6 para. 1 lit. b) DSGVO for the fulfilment of a contract or pre-contractual measures.
  • Duration of storage/li>
• The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Statutory retention periods remain unaffected.
• If the time stamp and the IP address were stored, the storage period is 24 hours. Subsequently, the personal reference of the IP address is automatically removed by data modification and the IP address is stored in anonymised form for 6 months and then automatically deleted.
  • Possibility of objection and revocation
• You can revoke your consent at any time. To do so, simply send an informal e-mail to legal@mosetter.de. The legality of the data processing already carried out remains unaffected by the revocation.
  1. Order processes
     • Description and scope of data processing

• In our webshop you have the possibility to order products. If you have already created a customer account as part of the above-mentioned registration, we will use the data you have stored there. You also have the option of creating a new customer account during an order. If you have not created a customer account, you have the option of ordering as a guest. In this case we process the following data:
• Salutation (optional)
• First name, last name
• Company (optional, if it is a business customer)
• Complete address details
• E-mail address
• Telephone and mobile phone numbers (optional)
• Date of birth (voluntary)
• The following data is also processed at the time of the order:
• Time stamp of the order (date and time)
• IP address
  • Legal basis for data processing
• The legal basis for the processing of the data for the order is Art. 6 para. 1 lit. b) DSGVO. The logging of the order is based on our legitimate interests according to Art. 6 para. 1 lit. f) DSGVO.
  • Purpose of the data processing
• The processing of personal data serves to process your order. The logging serves to prevent misuse of the services or the e-mail address used or to prevent such misuse. This purpose is also our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO.
  • Duration of storage
• The data will be stored for as long as is necessary for the processing of the contract and any rights arising from the contractual relationship. If the data was provided to us when purchasing goods, this data is generally stored until the end of the contractual relationship. Your data will be deleted at the end of the third year after the conclusion of the contract, unless there are legal retention periods. In addition, a longer retention period may be required in individual cases for evidence purposes.
• If the time stamp and the IP address were stored, the storage period is 24 hours. Subsequently, the personal reference of the IP address is automatically removed by data modification and the IP address is stored in anonymised form for 6 months and then automatically deleted.
  • Possibility of objection and revocation
• The collection of the data is absolutely necessary for the processing of the order. In this respect, there is no possibility for the user to object.
  1. Contact us by e-mail or telephone
     • Description and scope of data processing

• On our website, it is possible to contact us via the e-mail address provided. If you send us enquiries by e-mail, your details within the e-mail, including the contact details you provide there, will be processed for the purpose of processing the enquiry and for the case of follow-up questions for contacting us. These data are:
• E-mail address
• Message content (if specified including: first name, last name, contact details)
• Depending on the message content, the email may contain further personal data (e.g. when using a signature).
• You also have the option of contacting us by telephone. In this case, the caller's personal data provided during the telephone call will be processed: These data include in particular:
• (mobile) telephone number
• Depending on the request or content of the conversation (e.g. telephone orders; questions about purchased/ordered products, shipping information, etc.), conversation content may be processed. Conversations are not recorded.
  • Legal basis for data processing
• The processing of data in the context of your contact is based on your consent in accordance with Art. 6 (1) a) DSGVO. If a customer enquiry concerns a specific question about a previously purchased/ordered product, the data processing can also be based on Art. 6 para. 1 lit. b) DSGVO.
  • Purpose of the data processing
• The processing of the personal data from the input mask as well as the data received by telephone or e-mail serves us to process the contact and your request.
  • Duration of storage
• The data will be processed by us until the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed), you request us to delete the data or revoke your consent to storage. Mandatory legal provisions - in particular retention periods - remain unaffected.
  • Possibility of objection and revocation
• You can revoke this consent at any time. An informal communication by e-mail is sufficient for this purpose. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
  1. Contact via WhatsApp
     • Description and scope of data processing

• Our website offers the option of contacting us via a messaging service (WhatsApp). This can be used to contact us electronically. If you contact us via WhatsApp, we will process the following data:
• WhatsApp profile name
• Mobile phone number
• Message content
• Online status (last online/online)
• Profile picture
• Profile information
• Status messages (incl. 24-hour available photos, videos, texts and links)
• Location data

The data marked with "if applicable" will only be processed if you have specified the provision of this data within your data protection settings on your mobile phone.

• In order to process the above-mentioned data, we work together with WhatsApp Ireland Limited as well as other service providers. Some of these service providers are based in third countries outside the European Union or transmit data to such third countries. Please note that third countries outside the European Union may treat personal data and its protection differently than EU countries.
• If the information transferred also includes personal data, it must be ensured before such a transfer that the required adequate level of data protection is guaranteed in the respective third country or at the recipient in the third country. This may result in particular from a so-called "adequacy decision" of the European Commission, which determines an adequate level of data protection for a specific third country as a whole. For some third countries, the European Commission has decided that they offer an adequate level of data protection (e.g. Argentina and the USA). Alternatively, the data transfer can also be based on the so-called EU standard contractual clauses agreed with a recipient.
• When using the messenger service, WhatsApp processes data received from the user independently/as a processor as well as data obtained automatically or from third-party providers. When using WhatsApp, we would like to point out possible risks, as we are not aware of the details of data processing, especially with regard to the existing metadata, at WhatsApp. For example, WhatsApp points out in its privacy policy that WhatsApp shares collected information worldwide, both internally with meta companies and externally with third parties. This includes locations where the data centres WhatsApp works with are located and where other internal meta-companies and external third party service providers are located (this includes the United States). In addition, we are not aware of the extent to which WhatsApp shares data with regulators, law enforcement, other government agencies, industry partners (e.g. other online platforms and technology companies), and advisors (e.g. external lawyers) in a GDPR compliant manner. This personal data may therefore be disclosed by WhatsApp to other third parties or used for other purposes beyond the actual purpose of the data processing. Rights of access to recipients of the data sets created may not be sustainably asserted or enforced. In addition, there may be a higher likelihood of incorrect data processing that does not fully comply with the GDPR in terms of the technical and organisational measures taken to protect personal data, both quantitatively and qualitatively. WhatsApp bases its data processing in its privacy policy on the adequacy decision of the European Commission for Israel as well as on standard contractual clauses approved by the European Commission for transfers to the United States, the United Kingdom and Singapore. WhatsApp's own established security measures to maintain an adequate level of data protection are also unknown. With regard to WhatsApp's data processing, reference is made in particular to the privacy policy of WhatsApp Ireland Limited, available at https://www.whatsapp.com/legal/privacy-policy-eea.
  • Legal basis for data processing
• The data is processed exclusively on the basis of your consent pursuant to Art. 6 (1) a) DSGVO.
  • Purpose of data processing
• The processing of the personal data is solely for the purpose of processing the contact.
  • Duration of storage
• The data received from you will be processed by us until the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.
  • Possibility of objection and revocation
• You can revoke this consent at any time. An informal communication by e-mail is sufficient for this purpose. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
  • Data transfer to third parties
• We transmit personal data to third parties if this is necessary within the scope of the contract processing, for example to the companies entrusted with the delivery of the goods or the payment service provider entrusted with the payment processing. Furthermore, we transmit personal data to our tax advisors, auditors and lawyers to the extent necessary for accounting purposes or the assertion of legal positions. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
  1. Payment provider
     • Description and scope of data processing

• In order to process your order, we work together with the following payment service providers, who support us in whole or in part in the execution of concluded contracts, whereby these third parties are each independently responsible for payment processing. For payment processing, we collect further data depending on the payment method and forward your data to the corresponding payment service providers.
  1. Payment via PayPal: On our website we offer, among other things, payment via PayPal. When choosing the PayPal payment method, the customer is automatically redirected to the PayPal site (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. There, the authorisation and processing of the payment takes place on the PayPal website. For the authorisation at PayPal we transmit the following data to PayPal:
• First name, last name
• Billing and delivery address (street, postcode, city)
• E-mail address
• Order value

For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration (https://www.paypal.com/myaccount/privacy/privacyhub). You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

1. Payment via credit card, advance payment by bank transfer and PayPal: In the case of payments by credit card, advance payment by bank transfer or PayPal, the payment is processed via the payment service provider mollie (Mollie B.V, Keizersgracht 126, 1015CW Amsterdam, The Netherlands), to whom we pass on the payment data. The following credit card data will be processed:

• Card product: credit card (MasterCard, Visa, AmericanExpress, etc.) or giro or debit card
• Name of the cardholder or account holder
• E-mail address
• Expiry date (month/year) for credit cards
• Credit card number
• Card verification number
• IBAN
• Order value

For details on payment via Mollie B.V., please refer to the privacy policy of Mollie B.V. (https://www.mollie.com/de/privacy). According to the privacy policy of Mollie B.V., the following personal data is processed when you as a consumer use a service:

• Your payment details (for example bank account number or credit card number)
• Your IP address
• Your internet browser and device type
• In some cases, your first and last name
• In some cases, your address details
• In some cases, your email address and/or telephone number
• In some cases, information about the product or service you have purchased.
  1. Payment via ApplePay: On our website we offer, among other things, payment via Apple Pay. The provider of this payment service is Apple Inc, Infinite Loop, Cupertino, CA, represented in Europe by Apple Distribution International Ltd, Hollyhill Industrial Estate, Hollyhill, Cork, Republic of Ireland. If you choose this payment method, the payment is processed via the Apple Pay function of your terminal device by charging a payment card deposited with Apple Pay. The following data will be transmitted in this process:
• Order information

If Apple Pay is used as a payment method, we will receive your postcode or other relevant information to enable us to calculate applicable taxes and shipping charges. After authorising payment, other information (such as a device or merchant-specific account number or a shipping or email address) may also be shared with us. For details on paying via ApplePay, please see ApplePay's privacy policy (https://www.apple.com/de/legal/privacy/data/de/apple-pay/).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Further information on the handling of user data can be found in Apple's privacy policy at: https://www.apple.com/de/legal/privacy/de-ww/.

• Purpose of the data processing

• We pass on your personal data, in particular payment data, to the commissioned payment service provider within the framework of payment processing, insofar as this is necessary for payment processing.
  • Legal basis for data processing
• The legal basis for the transfer of data is Art. 6 para. 1 lit. a) and lit. b) DSGVO.
  • Duration of storage
• The data will be stored for as long as is necessary for the processing of the contract as well as rights arising from the contractual relationship. If the data was provided to us when purchasing goods, this data is generally stored until the end of the contractual relationship. Your data will therefore be deleted at the end of the third year after conclusion of the contract, unless there are legal retention periods beyond this.
  • Possibility of objection and revocation
• The collection of the data is absolutely necessary for the processing of the order. In this respect, there is no possibility for the user to object.
  1. Plugins and tools
     • Youtube

• This website uses plugins of the video portal Youtube. The operator of the website is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The integration is done in order to improve our offer and the user experience and in the interest of an appealing presentation of our online offers.
• When you visit our website, a connection is established to the YouTube servers. This informs them that you have visited our website. In this context, YouTube collects data on the browser, operating system and IP address, among other things. Furthermore, YouTube may store various cookies on your end device or use comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts.
• Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a) DSGVO as well as § 25 para. 1 TTDSG, insofar as you have given your consent to the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time. Further information on the handling of user data can be found in YouTube's privacy policy at: https://policies.google.com/privacy?hl=de.
• The company is certified according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Any company certified under the DPF undertakes to comply with these data protection standards. For more information, please visit the following link: https://www.dataprivacyframework.gov/s/. For the rest, please refer to section II. 2. ("Use of cookies").
  • Vimeo
• This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA. Vimeo is used in the interest of an appealing presentation of our online offers. When you visit our site, a connection is established to the Vimeo servers. In doing so, the Vimeo server is informed that you have visited our site. In addition, Vimeo obtains data on the browser, operating system and IP address. The information collected by Vimeo is transmitted to the Vimeo server in the USA. Vimeo uses cookies or comparable recognition technologies (e.g. device fingerprinting) to recognise website visitors. The processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a) DSGVO as well as § 25 para. 1 TTDSG, insofar as you have given your consent to the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time. For the rest, please refer to section II. 2. ("Use of cookies").
• Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.
  • Font Awesome
• This site uses Font Awesome from the American company Fonticons (307 S. Main St., Suite 202, Bentonville, AR 72712, USA) for the uniform display of fonts. Font Awesome is integrated locally on the site. There is no connection to Fonticons servers. Font Awesome is used in the interest of a uniform and appealing presentation of our online offers. Font Awesome uses cookies. This is done exclusively on the basis of your consent pursuant to Section 25 (1) TTDSG, insofar as you have given your consent to the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time. For the rest, please refer to section II. 2. ("Use of cookies").
  1. Rights of the data subject
     1. Right of revocation and objection

• You have the right to object at any time to the personal data processed on the basis of Art. 6(1)(f) DSGVO, provided that there are grounds for the objection arising from your particular situation. However, your personal data will be further processed if there are compelling legitimate grounds to further process the data that override the interests, rights and freedoms of your person, or if the processing serves the assertion, exercise or defence of legal claims. If we process personal data from you for the purpose of direct marketing, you have the right to object to the processing of personal data for the purpose of such marketing at any time without giving reasons (Art. 21 DSGVO). You also have the right to revoke your consent to the processing of personal data granted on the basis of Art. 6 (1) a) DSGVO at any time. You are welcome to contact us at any time at legal@mosetter.de.
  1. Right of appeal to the competent supervisory authority
• Without prejudice to any other legal remedy, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 DSGVO). The competent supervisory authority in data protection matters is the State Data Protection Commissioner of the federal state in which our company is based.
  1. Right to data portability
• You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible. (Art. 20 DSGVO).
  1. Information, blocking, restriction, deletion
• Within the framework of the applicable legal provisions, you have the right at any time to free information about your processed personal data, in particular also about whether processed data, their origin and recipients and the purpose of the data processing as well as the storage period and the existence of automated decision-making in accordance with Art. 15 DSGVO. You also have the right to have this data corrected (Article 16 of the GDPR), deleted (Article 17 of the GDPR) or restricted (Article 18 of the GDPR).
• You can contact us at any time at legal@mosetter.de if you have any further questions on the subject of personal data.
  1. SSL encryption
• This site uses SSL encryption for security reasons and to protect the transmission of confidential content that you send to us. You can recognise an encrypted connection by the fact that the address line of the browser displays "https://" and by the lock symbol in your browser line. SSL encryption serves to protect the data you transmit to us from being read by third parties.