Ebay
Privacy Policy
- Person in Charge
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is
Ebner Friseureinrichtungen GmbH & Co.KG
Hohe Heide 5
97506 Grafenrheinfeld
Phone & WhatsApp: +49 (0) 9723 - 93542-0
WhatsApp: https://wa.me/message/OTI6QRZWS2HUB1
Fax: +49 (0) 9723 - 93542-20
- Hereinafter referred to as the seller –
- Processing of data for contract fulfillment
In the event of a contract being concluded, the customer’s personal data, such as eBay transmits the name, address, phone number, or email address to the seller.
We share the data necessary for shipping our goods (name, address, email address, phone number, if required due to shipping arrangements) with the relevant shipping provider for notification/coordination regarding the delivery of the goods and for the actual delivery of the goods.
The lawfulness of processing this data is based on Article 6(1)(b) of the GDPR, as it is necessary for the performance of a contract.
- Duration of storage, deletion
The seller stores all personal data provided by the customer only for as long as it is necessary to fulfill the purposes for which the data was provided, or for as long as required by law.
- Newsletter Option
The customer can subscribe to the seller’s newsletter via the eBay platform. Upon the customer’s consent to receive the newsletter via eBay, the seller is authorized to send newsletters to the customer using eBay’s newsletter tool, in accordance with Article 6(1)(a) of the GDPR. The seller sends a newsletter no more than once a week. The customer may unsubscribe from the newsletter at any time.
By subscribing to the newsletter, the customer further agrees that eBay may analyze their usage behavior regarding the newsletter and make this information available to the seller.
If the customer no longer wishes to receive the newsletter, they may revoke their consent at any time for the future. To do so, they can remove the seller from their list of saved sellers.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal.
- Disclosure of data to third parties
The disclosure of personal data also constitutes processing within the meaning of sections 2 and 3 above. However, we would like to take this opportunity to provide you with separate information regarding the disclosure of data to third parties. The protection of your personal data is very important to us. For this reason, we exercise particular caution when it comes to disclosing your data to third parties.
Disclosure to third parties therefore occurs only if there is a legal basis for processing. For example, we disclose personal data to individuals or companies acting as processors on our behalf in accordance with Article 28 of the GDPR. A processor is anyone who processes personal data on our behalf—that is, in particular, under our direction and control.
In accordance with GDPR requirements, we enter into a contract with each of our processors to ensure their compliance with data protection regulations and thus provide comprehensive protection for your data.
- Rights of the Data Subject / Customer
The client is entitled to the following rights:
- Information
Pursuant to Article 15 of the GDPR, the customer has the right to request information regarding their personal data processed by the seller. This right of access includes information regarding the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom their data has been or will be disclosed, the planned storage period or at least the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint with a supervisory authority; the origin of their personal data, if it was not collected by the seller; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.
- Correction
Pursuant to Article 16 of the GDPR, the customer has the right to request the seller to immediately correct any inaccurate or incomplete stored data.
- Deletion
The customer has the right to request the immediate deletion of their personal data from the seller, provided that further processing is not necessary for one of the following reasons:
- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) of the GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Art. 89(1) GDPR, to the extent that the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of such processing, or
- for the assertion, exercise, or defense of legal claims.
- Restriction on processing
Pursuant to Article 18 of the GDPR, the customer may request the restriction of the processing of their personal data for one of the following reasons:
- He disputes the accuracy of his personal data
- The processing is unlawful, and he refuses to have the personal data deleted
- The seller no longer needs the personal data for the purposes of processing, but the customer needs it to assert, exercise, or defend legal claims
- The customer has objected to the processing pursuant to Article 21(1) of the GDPR.
- Instructions
If the customer has requested the rectification or erasure of their personal data or a restriction on processing pursuant to Article 16, Article 17(1), and Article 18, the seller shall notify all recipients to whom their personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The customer may request that the seller provide a list of these recipients.
- Delivery
The customer has the right to receive the personal data they have provided to the seller in a structured, commonly used, and machine-readable format.
He also has the right to request the transfer of this data to a third party, provided that the processing was carried out using automated means and is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b).
- Cancellation
Pursuant to Art. 7(3) of the GDPR, the customer has the right to revoke their consent to the seller at any time. The revocation of consent does not affect the lawfulness of processing carried out on the basis of the consent prior to the revocation. In the future, the seller may no longer continue data processing that was based on the revoked consent.
- Complaint
Pursuant to Article 77 of the GDPR, the customer has the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates the GDPR.
- Contradiction
If the customer’s personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, the customer has the right, pursuant to Art. 21 GDPR, to object to the processing of their personal data, provided there are grounds arising from their particular situation or the objection is directed against direct marketing. In the latter case, the customer has a general right to object, which the seller will implement without requiring the customer to specify a particular situation. If the customer wishes to exercise their right of withdrawal or objection, an email to the email address listed in the legal notice is sufficient.
- Automated decision-making in individual cases, including profiling
The customer has the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning him or her or similarly significantly affects him or her. This does not apply if the decision
- is necessary for the conclusion or performance of a contract between him and the seller,
- is permitted under Union or Member State legislation to which the seller is subject, and such legislation contains appropriate measures to safeguard his rights and freedoms as well as his legitimate interests; or
- with his express consent.
However, these decisions must not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of the customer.
With regard to the cases mentioned in i) and ii), the seller shall take appropriate measures to safeguard the rights, freedoms, and legitimate interests of the customer, which shall include, at a minimum, the right to request the intervention of a representative of the seller, to present one’s own position, and to challenge the decision.
As of: September 22, 2022
