Data protection notice
The following gives you an overview of how, to what extent and for what purpose personal data is collected and processed in using our website www.starmix.de (“website”).
We attach great importance to data protection. Collection and processing of your personal data is in compliance with the prevailing data protection regulations, specifically the EU General Data Protection Regulation (GDPR). By using our website you agree to the collection, use and transmission of your data in accordance with this data protection notice.
The controller for collection, processing and use of your personal data within the meaning of the GDPR is Electrostar GmbH, Stuttgarter Str. 36, D-73262 Reichenbach (“Electrostar”, “we” “us/our”).
If you want to object to the collection, processing or use of data by us in accordance with the data protection provisions generally or for individual measures, you can direct your objection to the above controller. You may save and print out this data protection notice at any time.
Data collection and use
The starmix website can be used without entering any personal data. The following access data is stored solely for the purpose of improving the usability of the website and the products offered: name of the accessed pages, the browser used, the operating system, the ISP and requested domain, date and time of access, search machine used, names of downloaded files and your IP address. Personal data is used exclusively for occasional advertising purposes if you make it available for us explicitly and voluntarily, for example in the context of contact for enquiries, registration, subscription to a newsletter. How Electrostar uses the personal data you provided depends on the department.
- Personal data entered in contact forms is stored to transfer it to the corresponding department or contact and deal with your concerns. Data entered in contact forms is not used for other purposes, and specifically not for advertising purposes.
- We need your email address for orders of the Electrostar Newsletter. The date and time of subscription are also stored, together with the agreement to data protection provisions and e-mail verification. This data is stored solely for the purpose of sending out the Newsletter. You can unsubscribe to the Newsletter at any time by sending an e-mail to firstname.lastname@example.org or clicking on the “Unsubscribe” link on the Newsletter page on our website. Your data is then erased from our system.
- For a competition Electrostar stores the data specified in the conditions as necessary for running the competition e.g. name, address, e-mail address). If you explicitly and voluntarily agree in the context of the competition to the use of your data for other purposes, we use your data for the agreed purpose, for example receiving the Newsletter. If your data was provided solely for the purpose of the competition, it is erased after the end of the competition and not passed to third parties.
In principle, unless otherwise specifically stated we only store your personal data for as long as needed to achieve the purpose.
Data is only forwarded to third parties without your explicit agreement if your enquiry or issue makes forwarding to third parties unavoidable or prevailing regulations of the Federal Republic of Germany make it necessary.
If and to the extent that we involve third parties in the course of performing contracts (for example, logistics service providers) they only receive personal data to the extent that transmission is required for the relevant service. If we outsource certain parts of data processing to a third party (“processor”) we commit processors contractually to using personal data only in compliance with the requirements of data protection legislation and to ensure protection of the rights of the affected persons.
Double opt-in procedure
To subscribe our Newsletter at your given e-mail address we need your written approval. For this, we use the so-called double opt-in procedure. After subscribing to the Newsletter you receive a confirmation link at the e-mail address you entered. We only proceed on the basis of explicit agreement after you confirm via this link. Please note that if you enter data of third parties without their agreement, you are violating their right to data protection. Your final agreement is verifiable and revocable at any time, click on the “Unsubscribe” button or send us an e-mail at email@example.com.
On our website we use social plug-ins from
Facebook social network, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland (“Facebook”). The plug-ins are indicated by a Facebook logo (a grey “f” that turns red when the mouse passes over it) or with the additional label “Facebook Social-Plug-in”. You can find an overview of Facebook plug-ins and what they look like here: https://developers.facebook.com/docs/plugins/
By opening a page within our website that contains one of these plug-ins, your browser makes a direct connection with Facebook’s servers. The plug-ins' content is sent directly to your browser from Facebook and embedded in the page. Through this connection, Facebook is informed that your browser has accessed the corresponding page within our website. This is the case even if you are not logged into Facebook or do not have a Facebook account. This information (including your IP address) is sent directly from your browser to a Facebook server in the USA and is stored there.
If you are logged into Facebook, Facebook can allocate the visit to our website to your Facebook account. If you interact with the plug-ins, for example by clicking on the “Like” button or by posting a comment, this information is also sent directly to a Facebook server and stored there. This information is also published on your Facebook profile and shown to your Facebook friends.
Please consult Facebook’s data protection guidelines for information regarding the purpose and extent of Facebook’s data collection and further processing and use of the data and regarding your rights in this respect as well as the settings available to protect your privacy: http://www.facebook.com/policy.php.
If you have a Facebook account and do not wish for Facebook to correlate the data collected through our website directly with your profile, please log out of Facebook before visiting our website. You can also completely prevent Facebook plug-ins from loading using add-ons for your browser.
YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”).
By opening a page within our website that contains one of these plug-ins, your browser makes a direct connection with Google’s servers. The plug-in's content is sent directly to your browser from Google and embedded in the page. Through this connection, Google is informed that your browser has accessed the corresponding page within our website. This is the case even if you are not logged into YouTube or do not have a YouTube account. This information (including your IP address) is sent directly from your browser to a Google server in the USA and is stored there.
If you are logged into YouTube, Google can allocate the visit to our website to your YouTube account. As website provider we note that we have no knowledge of the content of the data transmitted or its use by Google. Please consult Google’s data protection guidelines for information regarding the purpose and extent of Google’s data collection and further processing and use of the data and regarding your rights in this respect as well as the settings available to protect your privacy: https://policies.google.com/privacy?hl=de
If you do not wish Google to correlate the data collected from our website directly with your YouTube account, you must log out of YouTube before visiting our website. You can also completely prevent loading of plug-ins with add-ons for your browser, e.g. with the script blocker “NoScript” https://noscript.net/
Vimeo, operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA (“Vimeo”).
By opening a page within our website that contains one of these plug-ins, your browser makes a direct connection with Vimeo’s servers. This transmits certain information to Vimeo. It is also possible that Vimeo might set cookies on your terminal. Vimeo also makes possible the use of further functions, such as the evaluation or sharing of videos. It may be necessary for this for you to log in with your user account to Vimeo or certain third-party providers (such as Facebook or Twitter) so they can correlate the information you transmit with your relevant user account. These functions are offered exclusively by Vimeo and the third-party providers, and you should check their data protection provisions carefully before using the individual functions. As website provider we note that we neither have nor receive any knowledge of the content of the data transmitted or its use by Vimeo. The embedding means that Vimeo can also receive the information that your browser has accessed on the corresponding page of this website, even if you do not have a user account with Vimeo or are not logged into Vimeo.
Further information on the collection and use of your data by Vimeo and your rights in this respect is available in Vimeo’s data protection notice at Vimeo.com/privacy.
If, however, IP anonymisation is activated for this website, Google will only store your IP address in truncated form within a Member State of the European Union or another signatory state to the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be sent to a Google server in the USA and truncated there. IP anonymisation is activated for this website, so that Google will only store your IP address in truncated form within a Member State of the European Union or another signatory state to the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be sent to a Google server in the USA and truncated there.
Google will use this information on behalf of the website owner to evaluate the way you use the site, in order to compile website activity reports and to provide the website owner with other services related to website and Internet usage.
Google will not combine the IP address transmitted by your browser in connection with Google Analytics with any other data. You can prevent the installation of cookies by adjusting the relevant setting in your browser software; however we would like to point out that you will not be able to use all the functions of this website to their full extent in this case.
You can opt out of the communication to Google of data collected by the cookie in connection with your use of the website (including your IP address) and the processing of such information by Google by downloading and installing a browser plug-in available at: https://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to browser plug-ins or in browsers on mobile devices you can click on the following link to set an opt-out cookie which will prevent logging by Google Analytics on this website in future. (This opt-out cookie only functions on this browser and only for this domain. If you delete the cookies in your browser, you must click on this link again) Deactivate Google Analytics
For more information on conditions of use and data protection, see www.google.com/analytics/terms/de.html or www.google.com/intl/de/analytics/privacyoverview.html.
Google AdWords and Google Conversion-Tracking
This website uses Google AdWords. AdWords is an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”).
As part of Google AdWords we use so-called conversion tracking. If you click on an ad placed by Google, a cookie is used for conversion tracking. Cookies are small text files which the browser on the user’s computer stores. These cookies lose validity after 30 days and are not used for personal identification of users. If the user visits certain pages on this website and the cookie has not expired, Google and we can recognise that the user has clicked on the ad and been forwarded to this page.
Each Google AdWords customer gets a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information obtained with the help of conversion cookies is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who have clicked on their ad and been forwarded to a page with a conversion tracking tag. However, they do not receive any information which can be used to identify users personally. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie in your Internet browser through user preferences. You are then not included in the conversion tracking statistics.
Conversion cookies are stored on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the analysis of user behaviour to optimise both their web offer and their advertising.
For more information on Google AdWords and Google conversion tracking, see Google’s data protection policy: https://www.google.de/policies/privacy/.
You can set your browser to notify you of cookie storage and allow cookies only on an individual basis, block acceptance of cookies for specific cases or generally, and activate automatic deletion of cookies on closing the browser. Deactivation of cookies may limit the functionality of this website.
Your rights as a data subject
Under the applicable legislation you have various rights in respect of your personal data. If you wish to assert these rights send your enquiry by e-mail or post, clearly identifying yourself, to the address in (1) above.
The following section gives an overview of your rights.
Right to confirmation and information
You have the right at all times to confirmation by us whether your personal data is being processed. If so, you have the right to free information from us on the personal data stored and a copy of this data. You also have a right to the following information:
1. the purposes of processing;
2. the categories of personal data concerned;
3. the recipients or categories of recipient to whom the personal data has been or will be disclosed, particularly recipients in third countries or international organisations;
4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
5. the existence of the right to request from the controller rectification or erasure of your personal data or to restriction of processing of personal data concerning the data subject or to object to such processing;
6. the right to lodge a complaint with a supervisory authority;
7. where the personal data is not collected from the data subject, any available information as to its source;
8. the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
Where personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
Right to rectification
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing[A1] you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure (“right to be forgotten”)
You have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay where one of the following grounds applies:
1. The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
2. You withdraw consent on which the processing is based according to point (a) of Art. 6 (1) or point (a) of Art. 9 (2) or where there is no other legal ground for the processing.
3. You object to the processing pursuant to Art. 21 (1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2).
4. The personal data has been unlawfully processed.
5. The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
6. The personal data has been collected in relation to the offer of information society services referred to in Art. 8 (1).
If we have made personal data public and are obliged to erase it, we will take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to or copy or replication of this personal data.
3.4 Right to restriction of processing You have the right to obtain from us restriction of processing where one of the following applies.
1. The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
2. The processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead.
3. We no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims.
4. You have objected to processing pursuant to Art. 21 (1) pending the verification whether our legitimate grounds override yours.
3.5 Right to data portability You have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller without hindrance from us, provided that
1. the processing is based on consent pursuant to point (a) of Art. 6 (1) or point (a) of Art. 9 (2) or on a contract pursuant to point (b) of Art. 6 (1), and
2. the processing is carried out by automated means.
In exercising your right to data portability pursuant to paragraph 1 you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.
Right to object
You have the right to object, on grounds relating to your particular situation, to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) including profiling based on those provisions. We no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Where we processed personal data for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where personal data is processed for scientific or historical research purposes pursuant to Art. 89 (1), you have the right on grounds relating to your particular situation to object to processing of your personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Automated individual decision-making, including profiling
You have the right not to be subject to decision-making based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to withdraw consent under data protection law
You have the right to withdraw your consent to processing of personal data at any time.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data is unlawful.
We make every effort to ensure the security of your data within the framework of prevailing data protection law and technological possibilities. We use encryption in transferring your personal data. This applies to both your orders and customer login. We use the SSL (Security Socket Layer), but we point out that online data transfer (for example during e-mail traffic) can show security leaks. Complete protection of data against third-party access is not possible. To secure your data we maintain technical and organisational security measures which we are constantly upgrading to the state of the art. We further cannot guarantee that our services will be available at specific times; disruptions, interruptions or outages cannot be ruled out. The servers we use are regularly carefully backed up.
There is no automated decision-making based on the personal data collected.
Our Data Protection Officer is available for questions about data protection. You can e-mail them at firstname.lastname@example.org