Germany's largest textile wholesaler for promotion, leisure & profession!

banner

Data Protection

Information about our data processing

We, L-SHOP-TEAM GmbH, process your personal data when you contact us, use our website, enter into a contract with us or apply for a position with us. Data processing also takes place when you visit our online presence offerings on social media for which this information on data protection also applies.

1. Data controller

The data controller for the processing of your personal data in terms of the EU General Data Protection Regulation (GDPR) is:

L-SHOP-TEAM GmbH

Otto-Hahn-Straße 27

59423 Unna

Germany

2. Contact for Data Protection Officer

Our Data Protection Officer can be reached via email at datenschutz@l-shop-team.de or via post at the above-named address.

3. Data processing on our website

3.1. Access data and hosting

Each time you access our website, we collect the access data that your browser transmits automatically to allow you to visit the website. The access data includes in particular:

  • Your IP address
  • Name of the requested file
  • Date and time of access
  • Amount of data transmitted
  • Requesting provider
  • Information about the browser and the operating system used
  • Online identifiers (e.g. device identifiers, session IDs).

This access data is processed exclusively for the purposes of ensuring trouble-free operation of our site and improving our offerings. The access data is also stored temporarily for the purposes described above in internal log files in order to generate statistical information about the use of our website and to further develop our website with regard to the usage habits of our visitors (for example, if the proportion of mobile devices calling up the site increases).
In accordance with Art. 6 (1)(1) lit. f of the GDPR, this serves to protect our prevailing legitimate interests in the correct presentation of our offers within the framework of consideration of the interests. All access data is deleted at latest 14 days after the end of your visit to our site.

3.2. Hosting by a third-party provider

As part of processing on our behalf, a third-party provider supplies hosting services and display of our website: qwertiko (qwertiko GmbH, Waldstraße 41-43, 76133 Karlsruhe, Germany). All data collected as part of the use of this website or the forms provided for it in the online shop are processed on this provider's servers. We have concluded an order processing contract with the company, which undertakes to store data only in Europe.

3.3. Registration, advertising to existing customers

You have the option to register for our login area to be able to use the full functionality of our website. The data you are required to provide has been highlighted accordingly as required fields in our input form. You cannot register without providing this data. The legal basis for processing is Art. 6 (1) lit. b of the GDPR; if you as a person are not a party to a contract, we base our processing on Art. 6 (1) lit. f of the GDPR. Our legitimate interests here are the initiation and conducting of business relationships. Our general terms and conditions also apply to this contract.

When you register online, we also use your contact information to send you further information relevant to our products and services via email (“advertising to existing customers”). Specifically, this may include our newsletter as well as other news, promotions and offers, our customer feedback and other inquiries. The legal basis for this data processing is Art. 6 (1) lit. f of the GDPR in conjunction with Art. 7 (3) of the UWG (German Act against Unfair Competition), whereby data processing for legitimate interests is permissible provided that it concerns the storage and further use of data for promotional purposes.
You may object to the promotional use of your data at any time using a corresponding link in the email or by informing via email info@l-shop-team.de as well as via post to the above-named address, without incurring any costs other than the basic rates for transmission.
We use commercially available technologies in our newsletters to be able to measure interactions with newsletters (e.g. opening the email, links clicked). These are not assigned to the recipients. This data is only used in pseudonymous, unpersonalised form for general statistical analysis, as well as for optimisation and further development of our content and customer communication. This happens in one of two ways. Firstly, we use small graphics that are embedded into newsletters (called pixels) and generate a connection to the image server when emails are opened. Secondly, we use links that register when they are clicked and then redirect users to the desired target pages. Furthermore, we measure whether our newsletters are actually delivered. If you do not wish to have this usage behaviour analysed, you can unsubscribe from the newsletter. You can stop us from tracking your opening of our emails by deactivating the default output of graphics or HTML content in your email programme. The technical implementation of our newsletters is handled by CleverReach GmbH & Co KG, Schafjückenweg 2, 26180 Rastede, Germany. We have concluded a order processing contract with the provider.

3.4. Orders

3.4.1. Ordering process

During the ordering process, we collect the necessary required information for handling a contract:

  • Salutation
  • Company
  • First and last name
  • Date of birth (only for sole traders)
  • Email address
  • Password
  • Invoicing and shipping address.

Optional information such as telephone and fax numbers are collected if possible, so that we are able to also contact you in this manner for inquiries. The legal basis for processing is Art. 6 (1) lit. b of the GDPR; if you as a person are not a party to a contract, we base our processing on Art. 6 (1) lit. f of the GDPR. Our legitimate interests here are the initiation and conducting of business relationships.

3.4.2. Credit checks

No credit information is obtained for customers—either existing or new—who pay in advance. If you prefer, when you place your first or subsequent order in our web shop or use an alternative form of ordering—such as purchasing on account—we conduct a credit check to be able to offer you the corresponding payment option after confirmation of your order. To do so, we commission specialised credit agencies to determine your creditworthiness via credit check.

We transmit the required personal data for a credit check for this purpose to one of the following companies:

  • SCHUFA Holding AG
    Kormoranweg 5
    65201 Wiesbaden
    Germany
  • Creditreform
    Hammfelddamm 13
    41460 Neuss
    Germany

In addition, credit checks are conducted as part of ongoing business relationships, including if changes are to the business form, the occurrence of repeated payment incidents—such as payment default—or agreements on credit limits. The legal basis for this is our legitimate interests in accordance with Art. 6 (1) lit. f of the GDPR. Our legitimate interest is to minimise the risk of credit default and to offer you a convenient form of payment.

3.5. Contact

You have various options to contact us. These include the contact form, our general service telephone number and our service email address. As a general rule, we process your data on the basis of Art. 6 (1) lit. f of the GDPR. Our legitimate interest is the effective processing of the inquiries directed to us and, if applicable, the initiation and conducting of business relationships. If the contact is aimed toward concluding a contract, or if the contact occurs as part of a contract to which you are a party, the legal basis for the processing of the personal data is Art. 6 (1) lit. b of the GDPR. The data collected when the contact form is used is automatically deleted after complete processing of your inquiry, unless we still require your inquiry to fulfil contractual or legal obligations (see “Storage period”).

3.6. Postal advertising and your right to object

We also retain your first and last names as well as your postal address for our own advertising purposes, such as sending interesting offers and information about our products via post. This serves to protect our prevailing legitimate interests in advertising to our customers in terms of consideration of interests in accordance with Art. 6 (1) lit. f of the GDPR.
Advertisements are mailed on our behalf by a third-party provider to whom we have provided your data to process for this purpose.
You may object to the storage and use of your data for these purposes at any time by sending a message via the contact options set out below.

3.7. Raffles

You have the opportunity to participate in our raffles.

In the context of competitions, we use your data for the purpose of conducting the raffle and notifying you of the prize. Detailed information can be found, if applicable, in the conditions of participation for the respective raffle. The legal basis for the processing is the raffle contract in accordance with Art. 6 para. 1 lit. b GDPR. Any data processing for other or further purposes, in particular for advertising, will only take place on the basis of your consent pursuant to Art. 6 (1) a GDPR.

We base the sending of the offer to participate in the raffle on your consent pursuant to Art. 6 (1) lit. a GDPR, if you have given it to us, and otherwise on Art. 6 (1) lit. f GDPR in conjunction with Section 7 (3) UWG, based on our legitimate interest in offering raffles and strengthening our customer loyalty.

You can object to the sending of an offer to participate in raffles as well as the promotional use of your data at any time by means of a corresponding link in the e-mails or by notifying the above-mentioned contact details (e.g. by e-mail or letter) or revoke it with effect for the future without incurring any costs other than the transmission costs according to the basic rates.

4. Cookies

Cookies are text files that are automatically stored in the browser on your computer with a character string that is specific for your computer. We only use cookies that are strictly required for the operation of our website to provide the services you requested. These cookies are set without requiring consent in accordance with Art. 25 (2)(2) of the TTDSG (German Telecommunications and Telemedia Data Protection Act). The further processing of the information obtained from cookies is based on our legitimate interest in accordance with Art. 6 (1) lit. f of the GDPR. Our legitimate interest in this respect is to be able to provide you with the requested service.
The following cookies are set:

Cookie name Function Domain Storage period
sid These cookies store information on whether the current user is logged in and allows retrieval of user-specific data such as order history. shop.l-shop-team.de Session
sid_key This cookie saves the name of the session ID of the current user. shop.l-shop-team.de Session
language This cookie saves the information about what language should be used. shop.l-shop-team.de Session
sid

Function

These cookies store information on whether the current user is logged in and allows retrieval of user-specific data such as order history.

Storage period

Session

sid_key

Function

This cookie saves the name of the session ID of the current user.

Storage period

Session

language

Function

This cookie saves the information about what language should be used.

Storage period

Session

5. Google Maps

Our website uses the Google Maps map service, which is offered to persons from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and to all other persons by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, (collectively “Google”). To integrate and display the Google map material we use in your web browser, your web browser must connect to a Google server when accessing our website. This server may be located in the USA.

Through the integration of this map material, Google obtains information that a page on our website was accessed from the IP address of your device. When you access the Google map service on our website while you are logged into your Google profile, Google can also link this event to your Google profile. If you do not wish to be linked to your Google profile, you must log out of Google before accessing our contact page. Google saves your data and uses it for the purposes of advertising, market research and personalised display of Google Maps. You can find more information in the  Google Privacy Policy and the  Google Maps Additional Terms of Service.

We use what is called the two-click solution for the integration of Google Maps. This means that when you visit a site that integrates Google maps, no personal data is provided to Google at first. Data is only transferred to Google once you enable the integrated map.

6. Matomo

We use the Matomo open source web analytics software on our website for statistical analysis of visitor access. Matomo runs on our servers and no data is transferred to third parties (e.g. Matomo). The IP address processed to record your visit is immediately anonymised (the last two bytes of your IP address are anonymised). Only the anonymised IP address is used for the processing and storage of your visit. The following data may be saved in the visitor log along with a pseudonymised visitor ID (a device fingerprint):

  • Anonymised IP address
  • Pages retrieved (date, time, URL, title, length of time on page)
  • Downloaded files
  • Links to other websites clicked
  • Operating system
  • Browser type, version and language
  • Device type, brand, model and resolution
  • Approximate location (based on anonymised IP address)
  • Referrer URL (previously visited page)

Visitor logs are automatically deleted after seven days and daily reports are deleted after 24 months. You can enable the corresponding setting in your browser (Do Not Track) to prevent the tracking of your visit (see the explanations in the previous section) or use the following opt-out button. This creates a deactivation cookie so that the Matomo script is no longer executed. If no opt-out button is then displayed, this is probably blocked by an ad blocker or a similar technology in your browser — if this is the case, check your browser settings.

Matomo Opt-Out button

7. Online presences on social media

We maintain online presences in social networks to communicate with customers and interested parties there and to provide information about our products and services. As a rule, user data is processed for market research and advertising purposes. This allows user profiles to be created based on user interests. Cookies and other identifiers stored on users' computers are used for this purpose. These user profiles are then used to place advertisements both within social networks and on third-party websites. As part of the operation of our online presences,we can choose to access information provided by the social networks, such as statistics on the use of our online presences. These statistics are aggregated and may contain demographic information (e.g. age, gender, region, country) in particular, as well as data on interaction with our online presences (e.g. likes, subscribes, shares, views of pictures and videos) and the posts and content distributed via these channels. This can also give us information about users' interests and what content and topics are particularly relevant to them. We may also use this information to tailor the design and our activities and content to the respective online presence and to optimise it for our audience. Details of and links to the data from social networks that we can access as the operator of online presences can be found in the list below. The collection and use of these statistics is generally subject to joint responsibility. Where applicable, the corresponding contract is listed below. The legal basis for data processing is Art. 6 (1)(1) lit. f of the GDPR arising from our legitimate interest in effectively informing and communicating with users. For the legal basis of data processing by the social networks at their own responsibility, please refer to the data privacy information of each respective social network. More information can be found on the respective data processing as well as the options to object at the links below. Please be advised that the most efficient way to handle data privacy queries is to direct them to the respective provider of the social network because only these providers have access to the data and can take appropriate action immediately.

Xing / Kununu (New Work SE, Dammtorstr. 30, Hamburg 20354, Germany)
- Privacy policy and opt-out

8. Job applications

We give you the option to apply for our open positions; for example, via the email address bewerbung@l-shop-team.de. The purpose of this data collection is to select applicants for the possible establishment of an employment relationship. We collect the following data in particular for the purpose of receiving and processing your application: First and last name, email address, application documents (such as references, curriculum vitae), the earliest start date for job and salary requirements. The legal basis for the processing of your application documents is Art. 6 (1)(1) lit. b and Art. 88 (1) of the GDPR in conjunction with Art. 26 (1)(1) of the BDSG (German Federal Data Protection Act). If you are hired, your application documents will be placed in your personnel file. This is documentation that you have transmitted to us over the course of the application process and the documentation that we have prepared during the application process (e.g. notes on the application procedure). If you are hired, you will then be informed about the processing of your data again separately in the employment contract. If we accept your application and you enter into an employment relationship, we retain your application data for as long as required for the employment relationship and insofar as legal regulations justify an obligation to retain the data.

9. Disclosure of data

The data we collect will only be disclosed if:

  • You have expressly issued your consent to do so in accordance with Art. 6 (1) lit. a of the GDPR.
  • Disclosure is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 (1) lit. f of the GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not having your data disclosed.
  • We are legally obligated to disclose in accordance with Art. 6 (1) lit. c GDPR.
  • Disclosure is permitted by law and is necessary according to Art. 6 (1) lit. b of the GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual actions that take place at your request.

A portion of the data processing may be performed by our service providers. In addition to the service providers already mentioned in this data privacy information, this also specifically includes IT service providers who maintain our systems as well as consulting companies. Service providers are either bound by our instructions within the framework of contracted processing or have made other agreements with us regarding data protection; for example, because we process the data as joint controllers. We also work with partners who are obligated to confidentiality by profession, such as tax advisors, lawyers and other service providers.

10. Storage period

In principle, we store personal data only for as long as required to fulfil the purposes for which we collected the data. We then delete the data promptly, unless we require the data until the expiry of the statutory limitation period for evidence purposes for claims under civil law or due to statutory retention obligations. Contractual data must be retained for evidence purposes for three years from the end of the year in which our business relationship with you ends. The earliest that any claims become statute-barred according to the statutory limitation period is at this point in time. Even after that, we still have to store some of your data for accounting reasons. We are obligated to do so due to legal documentation requirements, particularly arising from the German Commercial Code and Tax Code. The document retention periods specified there range from two to ten years.

11. Your rights

You have the following rights as a data subject:

  • Right to withdraw consent
  • Right to object to the processing of your personal data (Art. 21 GDPR)
  • Right to access your personal data processed by us (Art. 15 GDPR)
  • Right to rectification of your incorrectly stored personal data (Art. 16 GDPR)
  • Right to erasure of your personal data (Art. 17 GDPR)
  • Right to restrict the processing of your personal data (Art. 18 GDPR)
  • Right to portability of your personal data (Art. 20 GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

To assert your rights described here, you may use the above-named contact details at any time. Provided that the respective legal requirements are met, we will comply with your data protection request. Your enquiries regarding the assertion of data protection rights and our responses to them will be stored for documentation purposes for a period of up to three years and, in individual cases, for longer if there is cause to assert, exercise or defend legal claims. The legal basis is Art. 6 (1) lit. f of the GDPR, based on our interest in defending against any civil claims under Art. 82 of the GDPR, avoiding fines under Art. 83 of the GDPR and fulfilling our accountability obligations under Art. 5 (2) of the GDPR.
Finally, you have the right to lodge a complaint to the data protection supervisory authority responsible for us. You may assert this right by contacting a supervisory authority in the member state of your residence, place of work or the place of the alleged infringement. In Unna — the registered office of L-SHOP-TEAM GmbH — the responsible supervisory authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf, Germany.

You have the right to withdraw your consent at any time. The consequence of this is that we will no longer continue the data processing based on this consent from that point on. The withdrawal of consent does not affect the legality of the processing on the basis of consent that has already been given up until the point of withdrawal. To the extent we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time on grounds relating to your particular situation. If there is an objection to data processing for the purposes of direct advertising, you have a general right to object that may also be implemented without stating reasons. If you would like to assert your right to object or to withdraw consent, it is sufficient to send an informal message to the above-named contact details.

Last revised: 10/2024