Privacy policy for shop partners

(As of: 10.06.2020, Karlsruhe)

1. An overview of data protection

General information

The following information will give you a brief overview of what happens to your personal data when you register as a partner shop at solute.de.

Personal data is all data with which you can be personally identified in the partner area. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

Who is responsible for data collection on this website?

The data collection in the partner area is carried out by solute GmbH.  Contact details can be found in the imprint of this website. 

How do we collect your data?

On the one hand, your data is collected by you giving them to us. This may be data that you submit during registration, in a contact form or in the partner area or that you submit when signing a contract. On the other hand your data will be collected during the contractual relationship (e.g. payment data, contract history).

 What do we use your data for?

The contractual parties shall follow the relevant legal and official regulations on privacy and data security. Personal data of the customer will be collected, processed and used by solute GmbH during the contractual relationship without further explicit approval only for the purpose of contract implementation, including billing.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified, blocked or eradicated (within the legal). Please do not hesitate to contact us at any time under the address disclosed in section “Information Required by Law” on this website if you have questions about this or any other data protection related issues. You also have the right to log a complaint with the competent supervising agency.

Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data. For details, please consult the Data Protection Declaration under section “Right to Restriction of Data Processing.”

What personal data is collected?

The following personal data is linked to the account and displayed in the partner area:

  • Main contact person of the shop partner with:
    Form of address, title (optional), first name, last name, department, position, telephone, fax (optional), mobile (optional), e-mail
  • Authorized representative with first name and surname
  • Contact details of contact persons
  • Contract data
  • Account details (optional)

2. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

solute GmbH

Zeppelinstr. 15

D-76185 Karlsruhe

Phone: +49 721 98993678

We are reachable during office hours monday to friday 10:00 - 17:00 CET.

E-Mail: shops@solute.de

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

In the event that data are processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this Data Protection Declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to Art. 21 Sect. 1 GDPR).

If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 Sect. 2 GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Information about, blockage, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified, blocked or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in section “Information Required by Law.”

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in section “Information Required by Law.” The right to demand restriction of processing applies in the following cases:

  • In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
  • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
  • If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
  • If you have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

Recording of data on our website

Server log files

Log file information is automatically reported by your browser or mobile device each time you access the Service. When you use our Service, our servers automatically record certain log file information. These server logs may include anonymous information such as your web request, Internet Protocol (“IP”) address, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed, and other such information.

The information comprises:

  • The type and version of browser used
  • The used operating system
  • Referrer URL
  • The hostname of the accessing computer 
  • The time of the server inquiry
  • The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

Request by e-mail, telephone or contact form

If you contact solute GmbH - via the contact form or by e-mail or telephone - your data will only be stored for the purpose of processing and handling your request.

The processing of the data given in the contact form is therefore only carried out on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can withdraw this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out up to the time of withdrawal remains unaffected by the withdrawal.

The data provided by you in the contact form will remain with us until you request us to delete it, withdraw your consent to its storage or until the purpose for which the data was stored no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

If you contact us by e-mail, telephone or fax, your inquiry including all personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your permission, provided that there are no other reasons for passing on the data and the interests of the person concerned do not outweigh any other interests. This is the case if the transfer of the data is necessary to avoid risks to state and public security or to prosecute criminal offences or to assert, exercise or defend civil law claims.

This data is processed on the basis of Art. 6 Para. 1 letter b DSGVO if your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 para. 1 lit. a DSGVO) and / or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of the inquiries addressed to us.

The data sent to us by you via contact requests will remain with us until you request us to delete it, withdraw your consent to its storage or until the purpose for which the data was stored no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

3. Data protection officer

Designation of a data protection officer as mandated by law

Thomas Stegemann
dacuro GmbH 
Heidelberger Str. 70b
69190 Walldorf

E-Mail: datenschutz@solute.de

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data on the use of our Internet pages (usage data) only to the extent necessary to enable the user to use the service or to invoice the user.

The collected customer data is deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

4. Newsletter

Newsletter data

Upon commencement of the business relationship, the customer will receive regular newsletters with interesting information and news about offers from solute. The customer may object to the sending of the newsletter at any time, without giving reasons, by e-mail to info@solute.de, without incurring any costs other than the transmission costs according to the basic rates.

Dispatch

Xqueue GmbH, Christian-Pleß-Straße 11-13, 63069 Offenbach am Main, Germany, Webanizer AG, Schulgasse 5, 84359 Simbach am Inn, Germany, are responsible for the distribution of the newsletter on our behalf.

The newsletters are sent by the above mentioned external service providers, who process the data exclusively on our behalf and are strictly contractually bound in the sense of the EU-GDPR. We receive from these service providers a notification whether the customers have received and opened the newsletter and whether a link has been clicked on within the newsletter. This serves to optimise our offer. 

5. Cookies

What are cookies?

In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser.

What are cookies used for?

Cookies allow a site or services to know if your computer or device has visited that site or service before. Cookies can then be used to help understand how the site or service is being used, help you navigate between pages efficiently, help remember your preferences, and generally improve your browsing experience. Cookies can also help ensure marketing you see online is more relevant to you and your interests.

We use so-called “session cookies.” They are automatically deleted after your leave our site. 

You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this website may be limited.

Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use (e.g. cookie notice), are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator’s services. If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this Data Protection Declaration.

What types of cookies does solute.de use?

Partner.solute.de uses strictly necessary cookies. These cookies are essential, as they enable you to move around the Service and use its features, such as accessing logged in or secure areas.

You can find more information on data protection here:

6. External Hosting

This website is hosted by an external service provider (Hoster Domainfactory GmbH). Personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated by a website.

The use of the hoster is for the purpose of fulfilling a contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.

Conclusion of a contract on order processing

In order to guarantee data protection compliant processing, we have concluded a contract for order processing with our host.

7. CRIF Bürgel, Creditreform

solute reserves the right to carry out a credit assessment of the customer before the conclusion of the contract. The collection, use and processing of data is carried out electronically.

Within the framework of this contractual relationship, we transmit collected personal data for the purpose of requesting, implementing and terminating this business relationship, as well as data regarding non-contractual conduct or fraudulent conduct to CRIF Bürgel GmbH, Leopoldstr. 244, 80807 Munich or Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss.

The legal basis for these transfers is set out in Article 6 sentence 1 letter b and Article 6 sentence 1 letter f of General Data Protection Regulation (GDPR). Data transfers based on Article 6 sentence 1 letter f GDPR may only take place insofar as this is necessary for maintaining the legitimate interests of our company or those of a third party, and is not outweighed by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The exchange of data with CRIF Bürgel GmbH or Creditreform also serves to comply with statutory duties of conducting creditworthiness assessments of customers (§§ 505a and 506 German Civil Code).

CRIF Bürgel GmbH processes the data received and also uses it for the purpose of creating profiles (scoring) to provide its contractual partners in the European Economic Area and Switzerland, and where applicable, third countries (if there exists for the country an adequacy decision of the European Commission) with information, among other things, for assessing the creditworthiness of natural persons. You may find more detailed information about the operations of CRIF Bürgel GmbH in the CRIF Bürgel GmbH Fact Sheet or online at www.crifbuergel.de/de/datenschutz.

To provide a better service, solute.de uses cookies. More Information can be found in our privacy policy.