Data protection

The person responsible for data processing is:

TierXXL.de / Preston Enterprises Swierczok
Owner Andre Swierczok
Neugasse 5
63594 Hasselroth
Germany

We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below we will inform you in detail about how your data is handled.


1. Access data and hosting
You can visit our websites without providing any personal information. Every time a website is accessed, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offering. In accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, this serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the site.

Hosting services provided by a third party
As part of processing on our behalf, a third-party provider provides us with the services of hosting and displaying the website. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offer. All data collected as part of the use of this website or in the forms provided in the online shop as described below are processed on its servers. Processing on other servers only takes place within the framework explained here.

This service provider is located within a country of the European Union or the European Economic Area.


2. Data collection and use for contract processing, contact
We collect personal data if you voluntarily provide it to us as part of your order or when you contact us (e.g. via contact form or email). Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract or to process your contact and you cannot send the order or contact us without providing them. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR to process the contract and process your inquiries. If you have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the tax and commercial law retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this is permitted by law and about which we inform you in this statement. Deleting your customer account is possible at any time and can be done either by sending a message to the contact option described below or using a function provided for this purpose in the customer account.


3. Data sharing
In order to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR, we pass on your data to the shipping company commissioned with the delivery, to the extent that this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution responsible for the payment and, if applicable, the payment service provider commissioned by us, or to the selected payment service, in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies.

We also use an external merchandise management system to process orders and contracts. The data transfer or processing that takes place in this respect is based on order processing.

Data transfer to shipping service providers
If you have given us your express consent to this during or after your order, we will pass on your email address to the selected shipping service provider in accordance with Art can contact you for delivery notification or coordination purposes.

Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

General Logistics Systems
Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein

or

DACHSER SE
Head Office
Thomas-Dachser-Str. 2
87439 Kempten


4. Email newsletters and postal advertising
TierXXL.de / Preston Enterprises Swierczok offers you the opportunity to register for the TierXXL.de email newsletter on our homepage. We only send newsletters, emails and other electronic notifications (hereinafter “newsletter”) with the consent of the recipient or legal permission. A newsletter will only be sent if you have consented to receive it by providing your email address The consent text is as follows: “I would like to receive the newsletter from TierXXL.de / Preston Enterprises Swierczok, operated by TierXXL.de / Preston Enterprises Swierczok, in order to be informed in the future about trends, offers, vouchers, promotions and offers from TierXXL.de / Preston Enterprises Swierczok can be informed by email. This consent can be revoked at any time with future effect under LINK or at the end of each email.”

In order to register for our newsletters, it is generally sufficient to provide your email address. However, we may ask you to provide a name in the newsletter for the purpose of personal address, or other information if this is necessary for the purposes of the newsletter.


Double opt-in process: Registration for our newsletter generally takes place using a so-called double opt-in process. This means that after registering you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with someone else's email address. Registrations for the newsletter are logged in order to be able to provide evidence of the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.


Deletion and restriction of processing: We can store the unsubscribed email addresses for up to three years based on our legitimate interests before we delete them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time. In the event of obligations to permanently observe contradictions, we reserve the right to store the email address in a blocking list (so-called “blacklist”) solely for this purpose.
The registration process is recorded on the basis of our legitimate interests for the purpose of providing evidence of its proper execution. If we commission a service provider to send emails, this is based on our legitimate interests in an efficient and secure shipping system.


Notes on legal bases: The newsletter is sent on the basis of the consent of the recipient or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and to the extent that this is permitted by law, e.g. in the case of advertising to existing customers. If we commission a service provider to send emails, this is done on the basis of our legitimate interests. The registration process is recorded based on our legitimate interests to demonstrate that it was carried out in accordance with the law.


Contents: Information about TierXXL.de / Preston Enterprises Swierczok, our services, promotions and offers.


Analysis and measurement of success: The newsletters contain a so-called "web beacon", ie a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from its server. As part of this retrieval Technical information is initially collected, such as information about the browser and your system, as well as your IP address and the time of access.
This information is used to technically improve our newsletter based on the technical data or the target groups and their reading behavior based on their access locations (which can be determined using the IP address) or access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the shipping service provider to monitor individual users. Rather, the evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
The evaluation of the newsletter and the measurement of success are carried out, subject to the express consent of the users, on the basis of our legitimate interests for the purposes of using a user-friendly and secure newsletter system that serves both our business interests and meets the expectations of the users.
Unfortunately, it is not possible to revoke the success measurement separately; in this case, the entire newsletter subscription must be canceled or objected to.

Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), meta/communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interest in content, access times).
Affected persons: communication partners.
Purposes of processing: Direct marketing (e.g. via email or post).
Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Option to object (opt-out): You can cancel your receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the contact options listed above, preferably email.


Advertising communication via email, post, fax or telephone
We process personal data for the purposes of advertising communication, which can take place via various channels, such as email, telephone, post or fax, in accordance with legal requirements.
The recipients have the right to revoke their consent at any time or to object to the advertising communication at any time.
After revocation or objection, we can store the data required to prove consent for up to three years based on our legitimate interests before deleting it. The processing of this data is limited to the purpose of possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.

Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers).
Affected persons: communication partners.
Purposes of processing: Direct marketing (e.g. via email or post).
Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).


Sweepstakes and competitions
TierXXL.de / Preston Enterprises Swierczok processes personal data of participants in competitions and competitions of participating subsidiaries and competition partners only in compliance with the relevant data protection regulations, insofar as the processing is contractually necessary for the provision, implementation and processing of the competition and the participants have consented to the processing or the processing serves our legitimate interests (e.g. in the security of the competition or the protection of our interests against misuse through the possible collection of IP addresses when submitting competition entries).
If participants' contributions are published as part of the competition (e.g. as part of a vote or presentation of the competition entries or the winners or the reporting on the competition), we would like to point out that the names of the participants can also be published in this context. Participants can object to this at any time.
If the competition takes place within an online platform or a social network (e.g. Facebook or Instagram, hereinafter referred to as “online platform”), the usage and data protection regulations of the respective platforms also apply. In these cases we would like to point out that we are responsible for the information provided by participants as part of the competition and inquiries regarding the competition must be directed to us.
The participants' data will be deleted as soon as the competition or competition has ended and the data is no longer required to inform the winners or because questions about the competition are expected. In principle, the participants' data will be deleted no later than 6 months after the end of the competition. Winners' data may be retained for a longer period of time, for example in order to be able to answer questions about the prizes or to fulfill the prize services; In this case, the retention period depends on the type of prize and is up to three years, for example for goods or services, in order to be able to process warranty cases, for example. Furthermore, the participants' data can be stored for longer, for example in the form of reporting on the competition in online and offline media.
If data was also collected for other purposes as part of the competition, its processing and retention period are based on the data protection information on this use (e.g. in the case of registration for the newsletter as part of a competition).

Types of data processed: inventory data (e.g. names, addresses), content data (e.g. text entries, photographs, videos).
Affected persons: competition and competition participants.
Purposes of processing: conducting competitions and competitions.
Legal basis: Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR).


5. Use of data in payment processing
Identity and creditworthiness check when selecting Klarna payment services

If you decide to use Klarna's payment services, we ask for your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR that we may transmit the data necessary to process the payment and an identity and creditworthiness check to Klarna. In Germany, the credit reporting agencies mentioned in Klarna's data protection declaration can be used for identity and creditworthiness checks.
Klarna uses the information received about the statistical probability of a payment default to make a balanced decision about the establishment, implementation or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the contact details below. This may mean that we can no longer offer you certain payment options. You can also revoke your consent to this use of personal data from Klarna at any time.


6. Cookies and web analytics
In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages, provided you have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR have granted. In addition, we use cookies to the extent that this is necessary to fulfill a legal obligation to which we are subject, in accordance with Article 6 Paragraph 1 Sentence 1 Letter c of the GDPR, and to protect our legitimate interests in an optimized presentation of ours, which predominate in the context of a balancing of interests Offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Further information about individual cookies and the respective legal basis can be found in the following sections of this data protection declaration.

Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Microsoft Edge™: https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies
Safari™: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox™ https://support.mozilla.org/de/products/firefox/protect-your-privacy/cookies
Opera™ : https://help.opera.com/de/latest/web-preferences/#cookies

If you have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the data protection declaration.

Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics for website analysis. The web analysis service is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Google (Universal) Analytics uses methods that enable analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not combined with other Google data. Once we no longer use Google Analytics, the data collected in this context will be deleted.

To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link : https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from recording data on this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you must click the link again.


7. Online Marketing
Google Ads Remarketing
We use Google Ads to advertise this website in Google search results and on third-party websites. For this purpose, when you visit our website, the so-called remarketing cookie is set by Google, which automatically enables interest-based advertising using a pseudonymous CookieID and based on the pages you visit. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our website in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Once we no longer use Google Ads Remarketing, the data collected in this context will be deleted.

Any further data processing will only take place if you have agreed to Google that your web and app browser history will be linked by Google to your Google account and that information from your Google account will be used to personalize ads that you display on the web see. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target groups.

Google Ads is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield.
A current certificate can be viewed here. As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link. You can also find out more about the setting of cookies and make settings from the Digital Advertising Alliance.

Google reCAPTCHA
For the purpose of protecting against misuse of our web forms and against spam, we use the Google reCAPTCHA service in some forms on this website. Google reCAPTCHA is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). By checking manual input, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. In accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, this serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in protecting our website from misuse and in ensuring that our online presence is displayed smoothly.
Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, as part of the verification process that enables an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website, including your IP address, is usually transmitted to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are evaluated by Google reCAPTCHA.
Personal data is not read or saved from the input fields of the respective form.
To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can prevent Google from collecting the data generated by JavaScript or the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by changing your browser settings prevent JavaScript or the setting of cookies. Please note that this may limit the functionality of our website for your use.
Further information about Google's data protection policy can be found here.

Google Fonts
The script code “Google Fonts” is integrated into this website. Google Fonts is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a uniform presentation of the content on our website in accordance with Article 6 Paragraph 1 Letter f) GDPR.
In this context, a connection is established between the browser you use and Google's servers. This gives Google knowledge that our website was accessed via your IP address.
To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
Further information about data processing by Google can be found in Google's data protection information.


8. Contact options and your rights
As a data subject, you have the following rights:

in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
in accordance with Art. 16 GDPR, you have the right to immediately request the correction of incorrect or complete personal data stored by us;
In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is required
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation;
- for reasons of public interest or
- to assert, exercise or defend legal claims
is required;
in accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, to the extent that
- you dispute the accuracy of the data;
- the processing is unlawful but you object to its deletion;
- we no longer need the data, but you need it to assert, exercise or defend legal claims or
- you have objected to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
in accordance with Art. 77 GDPR you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.
If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of consent given or objection to a specific use of data, please contact us directly using the contact details in our legal notice.


You can reach our data protection officer at:
info@tierxxl.de