Last update Dec. 8, 2023

1. General

1.1 About personal data

Personal data includes details that disclose or can disclose the identity of the user. We adhere to the principle of data minimization. As far as possible, we refrain from collecting personal data.

1.2 Data subject

The “data subject” is the person whose personal data is collected and processed. Hereinafter, the “data subject” is also referred to as the “website visitor” or “user”.

1.3 Handling of personal data

Personal data is exclusively used for the purpose of concluding a contract, defining the content, implementing or processing the contractual relationship acc. to Art. 6 I S. 1 b DSGVO (General Data ProtectionRegulation GDPR). Beyond that, personal data will only be processed if we have received your approval (Art. 6 I S. 1 a GDPR). On principle, they will not be passed on to third parties. Only for contract fulfillment, data will be passed on to the shipping company commissioned with the delivery, as far as required for the delivery of ordered goods. For the purpose of processing payments, necessary payment information is passed on to the credit institution commissioned with the payment and the commissioned and selected payment service provider. The processing of your personal data is exclusively conducted within the EU, as long as nothing to the contrary is stated in the following.

1.4 Data usage

During the visit of this website, general technical information is collected. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the origin site. This usage data is registered in a log file for technical reasons and can be used and stored for the purpose of statistical evaluation of this website. We do not link this usage data with your any other personal data.

1.5 Data retention

We retain your personal data beyond the termination of the purpose for which the data was collected only as long as this is required by law (in particular tax law).

2. Your rights

2.1 Information

You are entitled to request information on whether we are processing personal data about you and, if so, you have the right to obtain information about these personal data as well as further information referred to in Article 15 of the GDPR.

2.2 Right to rectification

It is your right to rectify inaccurate personal data concerning you and, in accordance with Article 16 of the GDPR, to demand the supplementation of incomplete personal data.

2.3 Right to deletion

You have the right to demand that we delete any personal data relating to you without undue delay. We are obliged to delete them immediately, in particular if one of the following reasons applies:

• Your personal data is no longer relevant for the purpose they were collected or otherwise processed.
• You revoke your consent upon which the processing of your data was based and there is no other legal basis for processing.
• Your data has been processed unlawfully.

The right to deletion does not apply insofar as your personal data is required for the assertion, exercise, or defence of our legal claims.

2.4 Right to restriction of processing

You have the right to request the restriction of the processing of your personal data if

• you dispute the accuracy of the data and we therefore verify the accuracy,
• the processing is unlawful and you refuse the deletion and demand the restriction of use instead
• the data is no longer of use to us, but you require it for the assertion, execution, or defense of legal claims,
• you have objected to the processing of your data and it has not yet been determined whether our legitimate reasons outweigh your reasons.

2.5 Right to data transferability

You have the right to receive any personal data relating to you that you have disclosed to us in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another responsible party without being obstructed by us, insofar as the processing is based on consent or a contract and involves the use of automated processes on our part.

2.6 Right to withdrawal

Provided that the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General and right of appeal

The exercise of your above rights is generally free of charge for you. In the event of complaints, you are entitled to contact the supervisory authority responsible for us, the State Data Protection Officer, directly.

3. Data Security

3.1 Data security

kick Consulting GmbH has implemented generally accepted standards of technology and operational security to protect personal data from loss, destruction, misuse, alteration, and distribution.

3.2 Sessions and Cookies

To operate the website, we use cookies or server-side sessions in which data can be stored. Cookies are files that are stored on your hard drive by a website in order to automatically recognize your device the next time you visit the site and thereby adapt the use of the site to your needs. Some of the cookies used are deleted after the browser session ends. These are so-called session cookies. Other cookies remain on your device and allow the browser to be recognized when you visit our website again (persistent cookies). You can configure your browser to be informed about the setting of cookies and to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Please note that you may not be able to use some functions of this website if cookies are disabled. We ensure that no personal data is transferred from sessions or by cookies and that cookies are only applied if they are technically required for the website. Accordingly, the balancing of interests shows that there are no conflicting interests on your part (Art. 6 I S. 1 f GDPR).

4. Newsletter

If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis. You may unsubscribe from the newsletter at any time, either by sending us a message via the contact options provided in the imprint or via the link provided for this purpose in the newsletter.

6. Third party services

6.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, operated by Google Inc.,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), and collects and stores data via this web analytics service, from which user profiles are created using pseudonyms. These user profiles are used to evaluate visitor behavior to design and improve the services offered on this website according to your needs. Google Analytics uses “cookies”, which are small text files placed on your device, to help the website analyze how visitors use the site. The information generated by the cookie relating to your use of this website is generally transmitted to a Google server in the USA and stored therein. In the event that IP anonymization is activated on this site, Google will truncate your IP address beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Likewise, the usage profiles kept under a pseudonym will not be merged with personal data about the user without the user’s explicit and separately declared consent. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do so you may not be able to use the full functionality of this website. You can furthermore prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

You can view Google’s privacy policy at http://www.google.de/intl/de/policies/privacy/. For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html. We would like to point out that on this site Google Analytics has been extended by the code “anonymizeIp” to ensure anonymized collection of IP addresses (so-called IP masking).

6.2 Social-Media-Links

We maintain our own social media pages for the third-party providers that can be contacted via links from this website. The use of the links directs you to the respective websites of the third-party providers (e.g. Facebook, Twitter, Google+). As soon as you have accessed the page of the third-party provider, you are within the responsibility of the respective third-party provider, which means that it is also their privacy policy or their statements on the use of data that apply. We have no influence in this regard, but we recommend logging out of the respective third-party provider before using a corresponding link in order to avoid unnecessary data transfer, and prevent usage profiles from being created by the third-party provider simply by using the link.

6.3 Payment via the payment service provider Stripe

A payment transaction can be processed via the payment service provider Stripe, ℅ Legal Process, 510 Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to Stripe insofar as it is necessary for the fulfillment of the contract (Art. 6 para. 1 lit. b. GDPR).

Name of the cardholder
e-mail address
Customer number
Order number
Bank details
Credit card details
Credit card expiry date
Credit card verification number (CVC)
Date and time of the transaction
Transaction number
Name of the provider
Location

The processing of the data specified in this section is neither legally nor contractually required. We are not able to process a payment via Stripe without the transmission of your personal data. [You have the option of choosing a different payment method.]

Stripe assumes a dual role as both responsible party and processor for data processing activities. As the responsible party, Stripe uses your transmitted data to fulfill regulatory obligations. This corresponds to Stripe’s legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the performance of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). We have no influence on this process.

Stripe acts as a processor in order to complete transactions within the payment networks. Within the scope of the order processing relationship, Stripe acts only in strict accordance with our instructions and is contractually obliged to comply with data protection regulations in accordance with Art. 28 GDPR. Stripe has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).
Further information on objection and removal options towards Stripe can be found at: https://stripe.com/privacy-center/legal

Your data will be stored until payment processing has been completed. This also includes the period of the statutory retention periods in accordance with § 147 AO / § 257 HGB, which is necessary for the processing of refunds, receivables management and fraud prevention.

Legal information / address: Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland, Attention: Stripe Legal

6.4 Payment via the payment service provider Klarna

We offer the option of processing the payment transaction via Instant Bank Transfer from the payment service provider Klarna GmbH, Theresienhöhe 12, 80339 Munich, Germany (Klarna). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to Klarna insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. GDPR).
First name
Surname
Transfer amount

In this case, you name will be compared with the name stored in your online banking before the actual transfer is made and, if the check is successful, the instant transfer will be initiated. We have no influence on this process and only receive the result as to whether the name check was successful or not]. Depending on how your bank operates online accounts different verification steps are necessary: If your bank only accepts transfer orders with sufficient coverage, Klarna will not undertake an account coverage check. In all other cases, Klarna checks whether the sum of the account balance and the overdraft facility, less any unrecognised transactions, covers the amount to be transferred. Klarna reserves the right, if there is an increased risk of misuse, by checking instant transfers from the last 30 days to see whether they have been successfully executed. There are no credit checks based on historical payment data.

The check will either be carried out via your bank’s HBCI interface or via the user interface of your online banking – as if you were logging in yourself. If you maintain several accounts, information about unselected accounts will not be saved. Klarna also stores your online banking user identification (login name/account number) as a hash value. PIN and TAN codes are not stored.

We have no influence on this process and only receive the result of whether the payment was made or rejected, your account number, sort code, subject, amount and date. Further information on objection and cancellation options towards Klarna can be found at: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de
Klarna stores your name, account number, bank sort code, subject, date and transfer amount for billing purposes within the statutory retention periods. The basis for this is § 28 para. 1 sentence 1 no. 1 BDSG.

Your data will be stored until payment processing has been completed. This also includes the period of the statutory retention periods in accordance with § 147 AO / § 257 HGB, which is necessary for the processing of refunds, receivables management and fraud prevention.

6.5 Payment via the payment service provider PayPal

We offer the option of processing the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to PayPal insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. GDPR)

First name
Surname
Your address
e-mail address
Telephone number

The processing of the data specified in this section is not required by law or contract. We cannot process a payment via PayPal without the transmission of your personal data. [You have the option of choosing a different payment method.]

PayPal performs a credit check for various services such as payment by direct debit to ensure your payment authorization and ability to pay. This corresponds to PayPal’s legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the fulfilment of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). For this purpose, your data (name, address and date of birth, bank account details) will be passed on to credit agencies. We have no influence on this process and only receive the result as to whether the payment has been made or rejected or whether a check is pending. Further information on objection and cancellation options towards PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Your data will be stored until payment processing has been completed. This also includes the period of the statutory retention periods in accordance with Section 147 AO / Section 257 HGB, which is required for the processing of refunds, receivables management and fraud prevention. Technical notes: We recommend checking whether log files of PayPal events are created that may contain personal data in plain text.

Legal information: No order processing according to Art. 28 GDPR. PayPal is not a processor within the meaning of Art. 4 No. 8 GDPR. It has its own responsibility. (https://www.lda.bayern.de/media/FAQ_Abgrenzung_Auftragsverarbeitung.pdf). Misc.: Special features apply to the use of instant payment notifications (https://developer.paypal.com/docs/api-basics/notifications/ipn/IPNIntro/)

7. Other data processing

The archive function of search engines also enables the data to be retrieved even if the information has already been removed or changed from the above-mentioned websites.

8. Updates or changes to this privacy policy

We reserve the right to review or amend this Privacy Policy from time to time. You will find the date of the current version under “Last updated on”. Your continued use of the platform following the posting of such changes on our website constitutes your acceptance of such changes to the Privacy Policy and your agreement to be bound by the amended terms.

9. Contact

To contact us regarding data protection, please feel free to use the following contact options. Responsible for the purposes of the GDPR:

kick consulting GmbH
Kärntener Str. 20
10827 Berlin
E-Mail: willkommen@kick-consulting.com
Phone: + 49 (0)30 843 066 00

Photographs of Annica Lehmann, Tegist Berhanu: Fotostudio Charlottenburg