1. Privacy at a glance
General notes
The following notes provide a simple overview of what happens with your personal data
when you visit this website. Personal data is any data
by which you can be personally identified. For detailed information about data protection,
please refer to the privacy policy below.
Data collection on this website
Who is responsible for the data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details
can be found in the section “Note on data the controller”
.
How do we collect your data?
On the one hand, your data is collected by you providing it to us. This ca e.g. be
data you enter in a contact form.
Other data is collected by our IT systems automatically or after your consent
when you visit
the website. This is especially technical data, e.g. Internet browser, operating system or time
of page view. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other
data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction
or deletion of this data. If you have given your consent to data processing,
you can revoke this consent at any time for the future. In addition, you have the right
to request the restriction of the processing of your personal data under certain circumstances.
Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.
You can contact us at any time with regard to this and other questions on the subject of data protection.
Third-party analytics and tools
When visiting this website, your surfing behavior can be statistically analyzed. This is done
mainly with so-called analysis programs.
Detailed information about these analysis programs can be found in the following
privacy policy.
2. Hosting and Content Delivery Networks (CDN)
External Hosting
This website is hosted by an external service provider (hoster). The personal data
collected on this website is stored on the hoster’s servers. This may include, but is not limited to,
IP addresses, contact requests, meta and communication data, contractual data, contact details,
names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling contracts with our potential and
existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast and efficient
provision of our online offer by a professional provider (Art. 6 (1) lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its service obligations
and will follow our instructions regarding this data.
We use the following hoster:
blackpoint GmbH
Dirk Estenfeld
Friedberger Strasse 106b
61118 Bad Vilbel
Conclusion of a contract for order processing
To ensure data protection-compliant processing,
we have concluded an order processing contract with our hoster.
3. General notes and mandatory information
Privacy
The operators of these pages take the protection of your personal data very seriously. We treat your
personal data confidentially and in accordance with the statutory data protection regulations and
this privacy policy.
When you use this website, various personal data is collected.
Personal data is data with which you can be personally identified. This
privacy policy explains what data we collect and what we use it for. It also explains
how we do it and for what purpose.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail)
can have security gaps. A complete protection of the data against access by third parties is not
possible.
Note on the data controller
The data controller of this website is:
BALTECH AG
Lilienthalstrasse 27
85399 Hallbergmoos
Germany
Responsible for the content: Jürgen Rösch
Phone: +49 (0) 811-99881-0
E-mail: info@baltech.de
The data controller is the natural or legal person who alone or jointly with others
determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.)
.
Storage duration
Unless a more specific storage period has been specified within this data protection declaration,
your personal data will remain with us until the purpose for the data processing no longer applies. If you assert
a justified request for deletion or revoke consent to data processing,
your data will be deleted unless we have other legally permissible reasons for storing your personal data
(e.g. retention periods under tax or commercial law);
in the latter case, the data will be deleted once these reasons no longer apply.
Note on data transfer to the USA and other third countries
Among other things, tools from companies based in the USA or other third
countries that are not secure from a data protection perspective are integrated on our website. When these tools are active, your personal
data may be transferred to and processed in these third countries. We would like to point out
that no level of data protection comparable to that in the EU can be guaranteed in these countries.
For example, U.S. companies are obligated to release personal data to security authorities
without you, the data subject, being able to take legal action against this. It can therefore not
be ruled out that US authorities (e.g. intelligence services)
process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no
influence on these processing activities
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can
revoke consent already given at any time. The legality of the data processing carried out
until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to
direct marketing (Art. 21 GDPR)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 (1) LIT. E OR F GDPR
YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR
SITUATION;
THIS ALSO APPLIES TO PROFILING BASED ON
THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED
CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT,
WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS
WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING
WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE
PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF
LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
YOUR PERSONAL DATA ARE PROCESSED IN ORDER TO CARRY OUT DIRECT ADVERTISING,
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF
PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING;
THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH
SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA
WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING
(OBJECTION PURSUANT TO ART. 21 (2) GDPR).
Right of appeal to the responsible supervisory authority
In the event of breaches of the GDPR, data subjects shall have a right of appeal to a
supervisory authority, in particular in the Member State of their habitual residence, their place of work
or the place of the alleged breach. The right of appeal is without prejudice to other
administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract
handed over to you or to a third party in a common,
machine-readable format. If you request the direct transfer of the data to another controller,
this will only be done insofar as it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content,
such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption.
You can recognize an encrypted connection by the fact that the browser address bar changes from
“http://” to “https://” and by the lock symbol in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot
be read by third parties
Encrypted payment transactions on this website
If, after the conclusion of a contract with costs, there is an obligation to provide us with your payment data
(e.g. account number in the case of direct debit authorization), this data is required for
payment processing.
Payment transactions via the common means of payment (Visa/MasterCard, direct debit) are made
exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection
by the fact that the browser address bar changes from “http://” to “https://” and by the lock symbol
in your browser bar.
6 / 15
With encrypted communication, your payment data that you transmit to us cannot
be read by third parties.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free
information about your stored personal data, its origin and recipient and the purpose of data processing and,
if applicable, a right to correction or deletion of this data. You can
contact us at any time with regard to this and other questions on the subject of personal data
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data.
For this purpose, you can contact us at any time. The right to restrict processing exists in
the following cases:
If you dispute the accuracy of your personal data stored by us,
we usually need time to verify this. For the duration of the review,
If the processing of your personal data happened/is happening unlawfully,
you may request the restriction of data processing
instead of erasure.
If we no longer need your personal data, but you need it to exercise,
defend or enforce legal claims, you have the right to
request restriction of the processing of your personal data instead of deletion.
If you have filed an objection pursuant to Art. 21 (1) GDPR, a balancing of your and
our interests must be carried out. As long as it has not yet been determined whose interests
prevail, you have the right to request the restriction of the processing of your
personal data.
If you have restricted the processing of your personal data, this data may –
apart from being stored – only be processed with your consent or for the assertion, exercise or
defense of legal claims or for the protection of the rights of another natural or legal person or
for reasons of an important public interest of the European Union or
a Member State.
Objection to advertising e-mails
The use of contact data published within the scope of the imprint obligation for the transmission of
not expressly requested advertising and information materials is hereby contradicted. The
operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of
advertising information, such as spam e-mails.
4. Data collection on this website
Cookies
Our Internet pages use so-called “cookies”. Cookies are small text files
and do not harm your device. They are stored either temporarily for the duration of a session
(session cookies) or permanently (permanent cookies) on your device. Session cookies
are automatically deleted after the end of your visit. Permanent cookies remain stored on your device
until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your device
when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company
(e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain
website functions would not work without them (e.g. the shopping cart function or the display
of videos). Other cookies are used to evaluate user behavior or display advertising.
Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to
provide certain functions that you have requested (functional cookies, e.g. for the shopping cart function)
or to optimize the website (e.g. cookies to measure the web audience)
are stored on the basis of Art. 6 (1) lit. f GDPR, unless another
legal basis is specified. The website operator has a legitimate interest in storing
cookies for the technically error-free and optimized provision of its services. If
consent to the storage of cookies has been requested, the storage of the cookies
in question is based exclusively on this consent (Art. 6 (1) lit. a GDPR);
consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and
only allow cookies in individual cases, exclude the
acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When cookies are disabled,
the functionality of this website may be limited.
If cookies are used by third-party companies or for analysis purposes, we will
inform you about this separately within the framework of this data protection declaration and, if necessary, request your consent.
Cookie consent with Usercentrics
This website uses the cookie consent technology of Usercentrics to
obtain your consent to the storage of certain cookies on your device or to the use of certain technologies
and to document this in accordance with data protection law. The provider of this technology is
Usercentrics GmbH, Rosental 4, 80331 Munich, Website:
https://usercentrics.com (hereinafter “Usercentrics”).
When you enter our website, the following personal data is transferred to Usercentrics:
Your consent(s) or revocation of your consent(s)
Your IP address
Information about your browser
Information about your device
Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consent granted to you
or its revocation. The data collected in this way is stored until
you request us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer
applies. Mandatory legal storage obligations remain unaffected.
The use of Usercentrics is done to obtain legally required consents for the use of
certain technologies. The legal basis for this is Art. 6 (1) lit. c GDPR.
Contract for order processing
We have concluded an order processing contract with Usercentrics. This is a
contract required by data protection law, which ensures that Usercentrics only processes the
personal data of our website visitors in accordance with our instructions and in compliance
with the GDPR
Server log files
The provider of the pages automatically collects and stores information in so-called server log files,
which your browser automatically transmits to us. These are:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has
a legitimate interest in the technically error-free presentation and optimization of its website
– for this purpose, the server log files must be recorded.
Contact form
If you send us inquiries via the contact form,
the information you provide in the inquiry form, including the contact data you enter there, will be stored by us for the purpose of processing the inquiry
and in case of follow-up questions. We do not share this data
without your consent
The processing of this data is based on Art. 6 (1) lit. b GDPR, insofar as your request
is related to the performance of a contract or is necessary for the performance of
pre-contractual measures. In all other cases, the processing is based on our legitimate interest
in the effective processing of the requests addressed to us (Art. 6 (1) f GDPR) or on your
consent (Art. 6 (1) a GDPR) if this has been requested.
The data you enter in the contact form will remain with us until you request us to delete it,
revoke your consent to store it, or the purpose for storing the data no longer applies
(e.g. after we have completed processing your request). Mandatory legal provisions –
in particular retention periods – remain unaffected.
Inquiry by e-mail, phone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry)
will be stored and processed by us
for the purpose of processing your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR, insofar as your request
is related to the performance of a contract or is necessary for the performance of
pre-contractual measures. In all other cases, the processing is based on our legitimate interest
in the effective processing of the requests addressed to us (Art. 6 (1) f GDPR) or on your
consent (Art. 6 (1) a GDPR) if this has been requested.
The data you send to us via contact requests will remain with us until you request us to delete it,
revoke your consent to store it, or the purpose for storing the data no longer applies
(e.g. after we have completed processing your request). Mandatory legal provisions –
in particular statutory retention periods – shall remain unaffected.
Registration on this website
You can register on this site to use additional features on the site. We use the data entered for this purpose
only for the purpose of using the respective offer or service
for which you have registered. The mandatory information requested during registration must be
provided in full. Otherwise, we will reject the registration.
For important changes, for example in the scope of the offer or in the case of technically necessary changes, we use the e-mail address
provided during registration to inform you in this way.
The processing of the data entered during registration is carried out for the purpose of implementing the user relationship
established by the registration and, if necessary, for initiating further contracts (Art.
6 (1) lit. b GDPR).
The data collected during registration will be stored by us as long as you are registered on this website
and will then be deleted. Statutory retention periods remain unaffected.
5. Analysis tools and advertising
Google Analytics
This website uses functions of the web analysis service Google Analytics. Provider is Google Ireland
Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyze the behavior of website visitors.
In doing so, the website operator receives various usage data, such as page views, duration of visit,
operating systems used and origin of the user. This data may be summarized by Google
in a profile that is assigned to the respective user or their device.
Google Analytics uses technologies that enable the recognition of the user for the
purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google
about the use of this website is usually transferred to a Google server in the
USA and stored there.
The use of this analysis tool is based on Art. 6 (1) lit. f GDPR. The
website operator has a legitimate interest in analyzing user behavior in order to
optimize both its web offering and its advertising. If a corresponding consent was requested
(e.g. consent to store cookies), the processing is based exclusively on
Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
For details, please refer to:
https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymization
We have activated the IP anonymization function on this website. As a result, your IP address
is shortened by Google within member states of the European Union or in other contracting states of the
Agreement on the European Economic Area before being transmitted to the USA. Only in
exceptional cases is the full IP address transmitted to a Google server in the USA
and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website,
compiling reports on website activity and
providing other services relating to website activity and internet usage
to the website operator. The IP address transmitted by your browser as part of Google Analytics
is not merged with other Google data.
Browser plugin
You can prevent the collection and processing of your data by Google by downloading and installing the
browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.
For more information on how Google Analytics handles user data, please see
Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en.
Order processing
We have concluded an order processing agreement with Google and fully
implement the strict requirements of the German data protection authorities when using Google Analytics.
Storage duration
User-level and event-level data stored at Google that is linked to cookies, user identifiers (e.g. user ID)
ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are
anonymized or deleted after 14 months. Details can be found under the following link:
https://support.google.com/analytics/answer/7667196?hl=en
6. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we require an email address from you
as well as information that allows us to verify that you are the owner of the e-mail address provided
and that you agree to receive the newsletter. Further
data is not collected or only collected on a voluntary basis. Diese Daten verwenden wir ausWe use this data exclusively for
sending the requested information and do not pass it on to third parties.
The processing of the data entered in the newsletter registration form is based
exclusively on your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent to the storage of the data,
the e-mail address and their use for sending the newsletter at any time,
for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out
remains unaffected by the revocation.
The data you provide us with for the purpose of receiving the newsletter will be stored by us or the newsletter service provider
until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you
unsubscribe from the newsletter or after the purpose has expired. We
We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our
legitimate interest pursuant to Art. 6 (1) lit. f GDPR.
After you have unsubscribed from the newsletter distribution list,
your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data
from the blacklist will only be used for this purpose and will not be merged with other data.
This serves both your interest and our interest in complying with legal requirements
when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). The
storage in the blacklist is not limited in time. You can object to the storage
if your interests outweigh our legitimate interest.
MailChimp with deactivated performance measurement
This website uses the services of MailChimp for sending newsletters. Provider is Rocket
Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service that can be used to organize the sending of newsletters, among other things. If you enter data for the purpose of
receiving the newsletter (e.g. e-mail address), this data is stored on
MailChimp’s servers in the USA. We have disabled performance measurement with Mailchimp,
so Mailchimp will not evaluate your behavior when you open our newsletters.
If you do not want your data to be transferred to Mailchimp,
you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
The data processing is based on your consent (Art. 6 (1) lit. a GDPR). You can
revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out
remains unaffected by the revocation.
The data you provide us with for the purpose of receiving the newsletter will be stored by us or the newsletter service provider
until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you
have unsubscribed. Data that has been stored by us for other purposes
remains unaffected by this.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
For details, please refer to:
https://mailchimp.com/eu-us-data-transfer-statement/ and
https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.
After you have unsubscribed from the newsletter distribution list,
your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data
from the blacklist will only be used for this purpose and will not be merged with other data.
This serves both your interest and our interest in complying with legal requirements
when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). The
storage in the blacklist is not limited in time. You can object to the storage
if your interests outweigh our legitimate interest.
For more details, please refer to MailChimp’s privacy policy at:
https://mailchimp.com/legal/terms/.
Conclusion of a data processing agreement
We have concluded a data processing agreement with MailChimp,
in which we oblige MailChimp to protect our customers’ data and not to pass it on to third parties.
7. Plugins and tools
Google Web Fonts (local hosting)
This site uses so-called web fonts provided by Google
for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google servers
does not take place.
For more information about Google Web Fonts, see
https://developers.google.com/fonts/faq and Google’s privacy policy:
https://policies.google.com/privacy?hl=en.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. Privider is Google
Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to verify whether the data entry on this website (e.g. in a contact form)
is made by a human or by an automated program. For this purpose,
reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This
analysis starts automatically as soon as the website visitor enters the website. For the analysis,
reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the
website or mouse movements made by the user). The data collected during the analysis is
forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not made aware
that an analysis is taking place.
The storage and analysis of the data is based on Art. 6 (1) lit. f GDPR. The
Website operator has a legitimate interest in protecting its web offerings from
abusive automated spying and from SPAM. If a corresponding consent was requested
the processing is carried out exclusively on the basis of Art. 6. (1) lit. a GDPR; the consent
can be revoked at any time.
For more information about Google reCAPTCHA,
please see the Google Privacy Policy and the Google Terms of Service at the following links:
https://policies.google.com/privacy?hl=en and
https://policies.google.com/terms?hl=en.
8. eCommerce and payment providers
Processing of data (customer and contract data)
We collect, process and use personal data only to the extent that they are necessary for the establishment,
content or modification of the legal relationship (inventory data). This
takes place on the basis of Art. 6 (1) lit. b GDPR, which permits the processing of data for the performance of a
contract or pre-contractual measures. We collect, process and use personal data about the use of this website
Personenbezogene D(usage data) only to the extent necessary to
enable the user to use the service or to bill the user.
The collected customer data will be
deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Data transmission at the conclusion of a contract for online stores, merchants and shipment of goods
We transmit personal data to third parties only if this is necessary in the context of the contract,
such as to the companies entrusted with the delivery of the goods or
the credit institution entrusted with the payment processing. A further transmission of the data does not take place or
only if you have expressly agreed to the transmission. Your data will not be passed
on to third parties without your express consent, for example for advertising purposes.
The basis for the data processing is Art. 6 (1) lit. b GDPR, which permits the processing of data for the
performance of a contract or pre-contractual measures.
Payment services
We include third-party payment services on our website. When you make a purchase from us,
your payment data (e.g. name, payment amount, account details, credit card number) will be processed
by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions
of the respective providers apply to these transactions. The use of
payment service providers is based on Art. 6. (1) lit. b GDPR (contract processing) as well as in the
interest of a smooth, convenient and secure payment process (Art. 6 (1) lit. f
GDPR). Insofar as your consent is requested for certain actions, Art. 6 (1) lit. a GDPR
is the legal basis for data processing; consent can be revoked at any time for the future.
We use the following payment services / payment service providers within the scope of this website:
PayPal
Provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449
Luxembourg (hereinafter „PayPal“).
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
For details, please refer to:
https://www.paypal.com/us/webapps/mpp/ua/pocpsa-full.
For details, please refer to PayPal’s privacy policy:
https://www.paypal.com/us/webapps/mpp/ua/privacy-full.
Instant bank transfer (“Sofortüberweisung”)
Provider is Sofort GmbH, Theresienhöhe 12, 80339 München (hereinafter
„Sofort GmbH“). With the help of the “Sofortüberweisung” procedure,
we receive a payment confirmation from Sofort GmbH in real time
and can immediately begin to fulfill our obligations. If you have chosen the payment method “Sofortüberweisung”,
you transmit the PIN and a valid TAN to Sofort GmbH, with which it
can log into your online banking account. Sofort GmbH automatically checks your account balance after logging in
and carries out the transfer to us using the TAN you provided. It then immediately sends us a
transaction confirmation. After logging in, your turnover,
the credit line of the overdraft facility and the existence of other accounts and their balances are also
checked automatically. In addition to the PIN and the TAN,
the payment data you enter as well as data about yourself are also transmitted to Sofort GmbH. Your personal data is your
first and last name, address, telephone number(s), e-mail address, IP address and, if necessary, other
data required for payment processing. The transmission of this data is necessary to establish your identity
beyond doubt and to prevent fraud attempts. For details regarding payment via
instant bank transfer, please visit the following links:
https://www.sofort.de/datenschutz.html and
https://www.klarna.com/sofort/.