Privacy Policy

 

Responsible for the data processing is:

Mosbay
Daniel El Bayoumi
Celsiusstr. 67
53125 Bonn
Germany
004915206099937
business@mosbay.de

We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

  1. Access data and hosting
    You can visit our website without giving any personal information. Each time a web page is called, the web server merely automatically stores a so-called server log file, which is e.g. contains the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval.

 

These access data are evaluated exclusively for the purpose of ensuring a trouble-free operation of the site as well as the improvement of our offer. In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR the preservation of our legitimate interests, which predominate in the context of a weighing up of interests, in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your page visit.

 

Hosting services by a third party
Within the framework of a processing on our behalf, a third party provider provides the services for hosting and displaying the website. All data collected as part of the use of this website or in the forms provided in the online shop as described below will be processed on its servers. Processing on other servers takes place only in the framework explained here.

 

This service provider is located in the US and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

 

  1. Data collection and use for contract execution, contacting and opening a customer account

 

We collect personal information if you voluntarily disclose it to us as part of your order or when contacting us (for example, by contact form or e-mail). Obligatory fields are marked as such, since in these cases we need the data for contract processing or to process your contact and you cannot send the order or the contact without their specification. The data collected is shown in the respective input forms. We use the data communicated by you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract handling and processing of your inquiries.

 

Insofar as you consent to this pursuant to Art. 6 para. 1 sentence 1 lit. If you have issued a GDPR  by opting to open a customer account, we use your data for the purpose of opening a customer account.

 

After completion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods, unless you have expressly consented to a further use of your data or we reserve the right to further data use, the is legally permitted and about which we inform you in this statement. The deletion of your customer account is possible at any time and can be done either by a message to the contact option described below or via a designated function in the customer account.

 

  1. Data transfer

For fulfillment of the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we will forward the payment data collected to the payment institution responsible for the payment and any payment service providers commissioned by us to the selected payment service. In part, the selected payment service providers collect these data themselves, as long as you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

 

We use a payment service provider based in a state outside the European Union. The transfer of personal data to this company takes place only in the context of the need to fulfill the contract.

 

Our payment service providers are currently:

Paypal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Visa: https://www.visa.de/datenschutz),

Mastercard: https://www.mastercard.de/de-de/datenschutz.html,

American Express: https://www.americanexpress.com/de/content/privacy-policy-statement.html,

Mollie: https://mollie.com/en/privacy

 

The same applies to the data transfer to our manufacturers or wholesalers in the cases in which they take over the shipping for us (third-party business).

 

Data transfer to shipping service provider
Insofar as you have given us your express consent during or after your order, we will give you consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR forward your e-mail address and phone number to the selected shipping service provider so that they can contact you prior to delivery for delivery notification or reconciliation.

 

The consent can be withdrawn at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data for this purpose, unless you have expressly consented to a further use of your data or we reserve the right to further data use, which is permitted by law and about which we inform you in this statement.

 

Data transfer to currency converter

By using our website, you (the visitor) agree to allow third parties to process your IP address, in order to determine your location for the purpose of currency conversion. You also agree to have that currency stored in a session cookie in your browser (a temporary cookie which gets automatically removed when you close your browser). We do this in order for the selected currency to remain selected and consistent when browsing our website so that the prices can convert to your (the visitor) local currency.

  1. E-mail Newsletter

E-mail advertising with registration for the newsletter
If you subscribe to our newsletter, we will use the data required or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. to send a GDPR.

 

Unsubscribing from the newsletter is possible at any time and can be done either by a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your e-mail address from the list of recipients, unless you have expressly consented to a further use of your data or we reserve the right to further data use, which is permitted by law and about which we inform you in this statement.

 

  1. Cookies and web analytics

In order to make the visit of our website attractive and to allow the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimized presentation of our offer in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, ie after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit it (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:

 

Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™

Failure to accept cookies may limit the functionality of our website.

 

Use of Google (Universal) Analytics for web analytics
For website analysis this website uses Google (Universal) Analytics. The Web analytics service is an offer of Google Ireland Limited, a company registered and operated under Irish law and located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.com). This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimized presentation of our offer in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Google (Universal) Analytics uses methods that allow you to analyze the use of the website, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address will be shortened prior to transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The anonymized IP address provided by Google Analytics within the framework of Google Analytics will generally not be merged with other data provided by Google. After purpose and end of the use of Google Analytics by us, the data collected in this context will be deleted.

 

To the extent that information is transferred to and stored on Google's servers in the United States, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

 

You can prevent the collection of the data (including your IP address) generated by the cookie and related to your use of the website to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de 

 

As an alternative to the browser plug-in, you can <a href=""javascript:gaOptout()""> click this link </a> to prevent future Google Analytics tracking on this site. An opt-out cookie is stored on your device. If you delete your cookies, you must click the link again.

 

 

  1. Online Marketing

Google reCAPTCHA

For the purpose of protection against misuse of our web forms and against spam, we use the Google reCAPTCHA service as part of a few forms on this website. Google reCAPTCHA is an offer made by Google Ireland Limited, a company registered and incorporated under Irish law and located at Gordon House, Barrow Street, Dublin 4, Ireland. (Www.google.de). By checking a manual entry, this service prevents automated software (so-called bots) from performing abusive activity on the site. In accordance with Art. 6 para. 1 sentence 1 lit. F GDPR the preservation of our legitimate interests in the protection of our website against abuse as well as a trouble-free presentation of our online presence.

 

Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, as part of the review methods that allow an analysis of the use of the website by you, such as cookies. The automatically collected information about your use of this website, including your IP address, is usually transmitted to and stored by Google on servers in the United States. In addition, other cookies stored by Google services in your browser are evaluated by Google reCAPTCHA.
A readout or storage of personal data from the input fields of the respective form does not take place.

 

To the extent that information is transferred to and stored on Google's servers in the United States, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

 

You can prevent the collection by Google of the data generated by the JavaScript or the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google, by executing in your browser settings of JavaScripts or the setting of cookies. Please note that this may limit the functionality of our web site for your use.

More information about Google's privacy policy can be found here.

 

 

  1. Social media

Our online presence on Facebook, Instagram

 

Our presence on social networks and platforms facilitates better, more active communication with our customers and prospects. We inform you about our products and ongoing promotions.
When you visit our online social media sites, your information may be collected and stored automatically for marketing research and promotional purposes. From these data so-called usage profiles are created using pseudonyms. These may be used to e.g. Place advertisements inside and outside the platforms that are allegedly in line with your interests. For this purpose, cookies are usually used on your device. These cookies store visitor behavior and the interests of users. This is gem. Art. 6 para. 1 lit. f. GDPR the preservation of our legitimate interest in optimizing the representation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (consent) to the data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
As far as the aforementioned social media platforms are headquartered in the US, the following applies: For the US, a decision on appropriateness of the European Commission is available. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
The detailed information on the processing and use of the data by the providers on their pages and a contact and your rights and options to protect your privacy, in particular opt-out options, please refer to the below linked privacy policy of the provider. If you still need help in this regard, you can contact us.

 

Facebook: https://www.facebook.com/about/privacy/
Data processing takes place on the basis of an agreement between jointly responsible persons according to Art. 26 GDPR, which you can see here.
Further information on data processing during the visit of a Facebook fanpage (information about Insights data) can be found here.

 

Instagram:  https://help.instagram.com/519522125107875

 

Opposition possibility (opt-out):

 

Facebook:  https://www.facebook.com/settings?tab=ads

Instagram:  https://help.instagram.com/519522125107875

 

  1. Sending evaluation reminders by e-mail

Review reminder by Yotpo
If you give us your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. during or after your order. If you have submitted a GDPR, we will send your e-mail address to Yotpo, 33 West 19th Street, 5th Floor,, New York, NY 10011 (www.yotpo.com) for e-mailing you a rating reminder.

This consent can be withdrawn at any time by a message to the contact option described below or directly to Yotpo.

 

  1. Contact and your rights

 

As a victim, you have the following rights:

  • in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us in the scope specified therein;

 

  • in accordance with Art. 16 GDPR, the right to demand immediate correction of incorrect or completed personal data stored by us;

 

  • according to Art. 17 GDPR the right to demand the deletion of your personal data stored by us, unless further processing
    o to exercise the right to freedom of expression and information;
    o to fulfill a legal obligation;
    o for reasons of public interest or
    o is required to assert, exercise or defend legal claims;

 

  • according to Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, as far as
    o the accuracy of the data is disputed by you;
    o the processing is illegal, but you reject its deletion;
    o we no longer need the data, but you need it for asserting, exercising or defending legal claims or
    o you have objected to processing in accordance with Art. 21 GDPR;

 

  • according to Art. 20 GDPR, the right to receive your personal data provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible;

 

  • according to Art. 77 GDPR, the right to complain to a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

 

For questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data and revocation of granted consent or objection to a particular use of data, please contact us directly via the contact details in our imprint.

 

Contradictory legal

To the extent that we process personal data as explained above in order to safeguard our legitimate interests, which are predominant in the context of a weighing up of interests, you can object to this processing with effect for the future. If the processing is for the purpose of direct marketing, you can exercise this right at any time as described above. Insofar as the processing takes place for other purposes, you have a right of objection only if there are reasons that arise from your particular situation.

 

After exercising your right to object, we will not further process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing of the assertion, exercise or defense of legal requirements.

 

This does not apply if the processing is for direct marketing purposes. Then we will not process your personal data for this purpose.

 

Privacy policy created with the Trusted Shops lawyer in cooperation with Wilde Beuger Solmecke lawyers.