Home /

Privacy policy

Preliminary statement, responsible partyUnless indicated otherwise below, the provision of your personal data is not required either by law or contract, nor is it necessary for entering into a contract. You are under no obligation to provide your data. Refusal to provide such information shall have no consequences. This shall only apply insofar as no other information is provided in the subsequent processing operations.

"Personal data" shall mean any information relating to an identified or identifiable natural person.

Responsible party

Responsible as defined in art. 4 No. 7 GDPR is Calistair GmbH, Clemens Str. 9, 60487 Frankfurt/Main, Tel: +49 (69)907 50862, e-mail: contact@calistair.com

Contact details of our data protection officer: contact@calistair.com

General legal background and purposes of data processing

We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other applicable data protection regulations (details below). Which specific data is processed and in what manner it is used depends primarily on the services agreed on an ad hoc basis. Further details or supplements regarding the purposes of data processing can be found in the respective contract documents, forms, a declaration of consent and/or other information provided to you (e.g. in the context of using our website or our terms and conditions).

The following sections 2.2. et seq. relate to all data processing operations within the scope of this data protection statement; sections 3 - 10 contain supplementary and specific information on individual areas of application.

Purposes of performing of a contractual or pre-contractual actions (art. 6 (1) (b) GDPR)

Personal data is processed for the purposes of performing our contracts with you and for processing your orders as well as for carrying out measures and activities within the scope of pre-contractual relations, e.g. with prospective customers. In particular, the data processing thereby serves to facilitate the sale of products or services pursuant to your orders and requests and includes the services, measures and activities required for such purpose. This includes mainly contract-related communications with you, the traceability of transactions, orders and other agreements as well as quality control through appropriate documentation, goodwill procedures, measures to control and optimise business processes as well as the performance of due diligence, management and control by affiliated companies (e.g. parent company); statistical evaluations for corporate management, cost accounting and controlling, reporting, internal and external communication, emergency management, accounting and tax assessment of operational services, risk management, assertion of legal claims and defence in legal disputes; ensuring IT security (e.g. system or plausibility checks) and general corporate security, e.g. building and plant security, securing and exercising domiciliary rights (e.g. by means of access restrictions); ensuring the integrity, authenticity and availability of data, preventing and investigating criminal offences; inspections by supervisory boards or other supervisory authorities (e.g. auditing).

Purposes within the scope of a legitimate interest on behalf of Calistair or a third party (art. 6 (1) (f) GDPR)

Beyond the effective performance of the contract or pre-contractual obligations, we may process your data for these purposes insofar as it is necessary to protect the legitimate interests of ourselves or a third party:

Ensuring uninterrupted operation of our website; improving our services; direct marketing operations; obtaining and exchanging data with credit agencies, insofar as this exceeds our economic risks; the examination and optimisation of procedures for analysing requirements;

the further development of services and products as well as existing systems and processes; the disclosure of personal data within the scope of due diligence in the course of company mergers and acquisitions negotiations; matching against European and international anti-terrorism lists, insofar as this goes beyond our legal obligations;

accumulating data, e.g. by using or researching publicly available sources of data; statistical evaluations or market analysis; benchmarking; the assertion of legal claims and defence in legal disputes which are not directly attributable to the contractual relationship; the limited retention of data, if deletion is not possible or only possible at disproportionately high expense due to a specific type of storage; the prevention and investigation of criminal offences, insofar as it is not performed exclusively to comply with legal requirements; ensuring security of buildings and facilities (e.g. through access restrictions and video surveillance), insofar as this goes beyond the scope of general due diligence; internal and external investigations, security audits; the possible listening in or recording of telephone conversations for quality assurance and training purposes; obtaining and maintaining certifications of private or official nature; where applicable, ensuring and exercising the right to the premises by taking appropriate measures, such as video surveillance towards protection of our customers and employees as well as to secure evidence in the event of criminal offences and for their prevention.

Purposes within the scope of your explicit consent

Processing of your personal data for specific purposes (e.g. use of your e-mail address for marketing purposes) may be carried out on the basis of your consent. You can withdraw your consent at any time. You will be informed about the purposes of the processing and about the consequences of withholding consent separately in the relevant text of the agreement.

The general rule is that withdrawal of consent has no retroactive effect. Processing operations carried out before such withdrawal shall not be affected and remain lawful.

Purposes to meet legal requirements (art. 6 (1) (c) GDPR) or in the public interest (art. 6 (1) (e) GDPR)

We are subject to a multitude of legal obligations, as is any party involved in the commercial activities. These are mainly legal requirements (e.g. commercial and tax legislation) but also, where applicable, regulatory or other official requirements. The purposes of data processing may include verification of identity and age, prevention of fraud and money laundering, prevention, combating and investigation of financing of terrorism and other criminal offences endangering property, matching against European and international anti-terrorist lists, compliance with fiscal monitoring and reporting obligations as well as the retention of data for purposes of data protection and data security, including audits by tax and other public authorities. Furthermore, the disclosure of personal data may also be required within the scope of official/judicial measures for the purposes of gathering evidence, prosecution or enforcement of civil claims.

Data processing when visiting our website

You can visit our websites without providing any personal information.

Every time you access our website, your internet browser transmits user data to us or our web host / IT service provider and stores this data in log files (so-called server log files). The data collected includes, inter alia, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the provider making the request. The processing is carried out on in accordance with art. 6 (1) (f) GDPR on the basis of our prevailing legitimate interest in ensuring an uninterrupted operation of our website and improving our services.

Data processing during creation of a customer account

During the registration of a customer account we collect your personal data to the extent described therein. The purpose of data processing is to improve your shopping experience and facilitate order processing. The processing takes place on the basis of art. 6 (1) (a) GDPR subject to your consent. You are entitled to withdraw your consent at any time by notifying Calistair GmbH, Clemens Str. 9, 60487 Frankfurt/Main, tel: +49 (69)907 50862, e-mail: contact@calistair.com, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal of such consent. Your customer account will be deleted after the withdrawal of your consent.

Collection, processing and transfer of personal data for order processing

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. The provision of this data is necessary for entering into a contract. Refusal to provide this information shall preclude entering into a contract. The processing is based on art. 6 (1) (b) GDPR and is necessary for the performance of a contract with you. Your data will be disclosed, among others, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers that you have opted for. In all cases we strictly observe all legal requirements. The scope of data disclosed is kept to a minimum.

Using the contact form

Collection and processing of data when using the contact formWhen using the contact form, we only collect your personal data (name, e-mail address, text of your messages) to the extent that you choose to provide it. The data processing serves the purpose of establishing contact. By sending your messages you agree to the processing of the data transmitted. The processing takes place on the basis of art. 6 (1) (a) GDPR subject to your consent.

You are entitled to withdraw your consent at any time by sending a simple notice to Calistair GmbH, Clemens Str. 9, 60487 Frankfurt/Main, tel: +49 (69)907 50862, e-mail: contact@calistair.com, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal of such consent. We shall only use your e-mail address to process your inquiries. Afterwards your data will be deleted, unless you have agreed to its further processing and use.

Use of your e-mail address for sending newsletters

We use your e-mail address independently from processing your contract exclusively for our own promotional purposes in the form of newsletters, provided you have given your explicit consent. The processing takes place on the basis of art. 6 (1) (a) GDPR subject to your consent.

You are entitled to withdraw your consent at any time by sending a simple notice to Calistair GmbH, Clemens Str. 9, 60487 Frankfurt/Main, tel: +49 (69)907 50862, e-mail: contact@calistair.com, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal of such consent. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by contacting us. Your e-mail address will then be removed from our mailing list.

Technically necessary cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or are saved by the Internet browser on the user's computer system. Whenever a user accesses a website, a cookie may be stored on the user's end device. This cookie contains a specific string of characters that allows the browser to be uniquely identified when you return to the website.

We use these cookies for the purpose of making our website more user-friendly, efficient and safe. Additionally, cookies enable our systems to recognise your browser and offer you our services even after going to a different page. Some functions of our website cannot be offered without the use of cookies. These require the browser to be identifiable after going to a different page. Processing is carried out for these technically essential functions and is limited to the data collected for this purpose on the basis of art. 6 (1) (f) GDPR on the basis of our prevailing legitimate interest in ensuring the optimal functionality of our website as well as a user-friendly and efficient configuration of our offer.

Cookies are stored on your computer. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are saved so that you can decide on an individual basis whether or not to accept them and prevent the cookies from being saved and the data they contain from being uploaded. Previously saved cookies can be deleted at any time. However, we would like to mention that in this case you might not be able to use all functions of our website to their full extent. You can find more information on how to manage (and deactivate) cookies in the most commonly used browsers by clicking on the links below: Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de (https://support.google.com/accounts/answer/61416?hl=de) Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies (https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies) Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen) Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac)

Cookies used for analysis / advertising purposes

The data processing described below in this section, in particular the setting of cookies, takes place subject to your consent on the basis of art. 6 (1) (a) GDPR. You are entitled to withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal of such consent.

Use of Google Analytics

We use the Google Analytics web analysis service of Google LLC for our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google").

If you are ordinarily resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) shall be responsible for handling your data. Google Ireland Limited is accordingly a company affiliated with Google and is responsible for the processing of your data and compliance with applicable data protection laws.

Processing of data serves the purpose of evaluating our website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide additional services for the website operator that are associated with using our website and the internet. The IP address received from your browser within the framework of Google Analytics shall not be combined with other data collected by Google.

Google Analytics uses cookies that allow us to analyse how you use our website. The information generated by the cookies regarding your use of our website will normally be transferred to a Google server in the USA and then stored there. Our website operates with IP anonymisation enabled. As a result, your IP address will be abbreviated in advance by Google if you are located within member states of the European Union or in other states that are signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and then abbreviated on that server.

Google has certified itself under the US-EU Privacy Shield Agreement, thereby committing itself to comply with the European Data Protection Directive.

You can disable the collection of data generated by the cookies referring to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link [https://tools.google.com/dlpage/gaoptout?hl=de (https://tools.google.com/dlpage/gaoptout?hl=de)].

To avoid data collection and storage by Google Analytics across multiple devices, you can enable an opt-out cookie. Opt-out cookies prevent future collection of your information when you visit this website. You must perform the opt-out on all systems and devices used to ensure that this feature is fully effective. If you delete the opt-out cookie, your requests will be transferred to Google again. Click here to activate the opt-out cookie: Disable Google Analytics (javascript:gaOptout()).

You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de (https://www.google.com/analytics/terms/de).html (https://www.google.com/analytics/terms/de.html) or at https://www.google.de/intl/de/policies (https://www.google.de/intl/de/policies)/.

Use of the remarketing or "similar target group" function by Google

We use the remarketing or "similar target groups" function offered by Google LLC on our website (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google").

This function is used to analyse the behaviour and interests of website visitors.

Google uses cookies to analyse the use of the website, which serves as the basis for the creation of advertisements related to specific user interests. Cookies are used to track the visits to our website as well as to collect anonymised data on the use of the website. No personal data of our website visitors is recorded. If you visit any other website connected to the Google Display Network described below, you will be shown ads that are likely to include previously viewed products and information.

Your data may be transferred to the USA. Google has certified itself under the US-EU Privacy Shield Agreement, thereby committing itself to comply with the European Data Protection Directive.

You can permanently disable the use of cookies by Google by clicking on the link below and downloading and installing the plug-in provided there: https://support.google.com/ads/answer/7395996?hl=de (https://support.google.com/ads/answer/7395996?hl=de)

Alternatively, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative's opt-out page at https://www.networkadvertising.org/choices/ (https://www.networkadvertising.org/choices/) and following the opt-out instructions provided there.

You can find more information about Google Remarketing and the corresponding privacy policy at: https://www.google.com/privacy/ads/ (https://www.google.com/privacy/ads/)

Use of Google Ads Conversion Tracking

We use the online advertising software "Google Ads" on our website and, as part of this program, conversion tracking (analysis of visitor activity). Google Conversion Tracking is an analysis service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google").

If you click on an ad displayed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited period of validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and such a cookie has not yet expired, Google and we may be able to identify that you have clicked on the ad and been directed to that page. Each Google Ads customer receives a unique cookie. This means it is impossible for these cookies to be tracked via the websites of Google Ads customers.

The information collected by means of the conversion cookie is used to generate conversion statistics. This provides us with information on the total number of users who have clicked on one of our ads and been redirected to a page with a conversion tracking tag. However, we do not receive information that can be used to identify individual users.

Your data may be transferred to the USA. Google has certified itself under the US-EU Privacy Shield Agreement, thereby committing itself to comply with the European Data Protection Directive.

You can disable personalised advertising in Google's advertising settings. Instructions on how to do this are available at https://support.google.com/ads/answer/2662922?hl=de (https://support.google.com/ads/answer/2662922?hl=de).

Alternatively, you can prevent the use of cookies by third parties by going to the Network Advertising Initiative's opt-out page at https://www.networkadvertising.org/choices/ (https://www.networkadvertising.org/choices/) and following the opt-out instructions provided there.

This will prevent your cookies from being included in the conversion tracking statistics.

You can find more information and the Google privacy policy at: https://www.google.de/policies/privacy/ (https://www.google.de/policies/privacy/)

Data retention duration

Once the contract has been performed in full, the data will initially be stored for the duration of the warranty period, and then in accordance with statutory retention periods, in particular those stipulated under tax and commercial legislation, and then deleted after said period has expired, unless you have consented to its further processing and use.

Rights of the data subject

Subject to the legal requirements, you are entitled to the following rights according to articles 15 to 20 GDPR:

Right to information,Right of correction,Right of deletion,Right to restrict processing,Right to data portability.

Right of appeal to the supervisory authority

Pursuant to art. 77 GDPR, you are entitled to submit a complaint to the supervisory authority if you believe that your personal data are being processed unlawfully.

Right to object

You can object to the processing of personal data based on your consent at any time with effect for the future,

12.3.2. Should the processing of personal data be based on our legitimate interest in accordance with art. 6 (1) (f) GDPR, you shall have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future. As soon as an objection is submitted, the processing of the data concerned shall be discontinued unless we have legitimate reasons for such processing which outweigh your interests, rights and freedoms or if such processing serves the assertion, exercise or defence of legal claims. Should your personal data be processed for the purposes of direct marketing, you can object to such processing at any time by contacting us. Once an objection has been made, we will discontinue the processing of the data concerned for the purpose of direct marketing.

12.4.3. Processing operations that have been performed legitimately prior to withdrawal of consent shall not be affected by an effective withdrawal of consent / cessation of legitimate use and shall remain lawful.

Newsletter

Should you opt to receive our newsletter offered on the website, we will need your e-mail address as well as information that allows us to verify that you are the owner of this e-mail address and that you agree to receive the newsletter.

We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. In the process, the potential recipient can be added to the mailing list. Afterwards, the user receives a confirmation e-mail to confirm the registration so that it is legally compliant. The address will only be actively added to the distribution list if confirmation is received.

We use this data exclusively for the purpose of sending the requested information and offers.

We use Newsletter2Go as our newsletter management software. Your data will be transmitted to the Newsletter2Go GmbH. Newsletter2Go is not allowed to sell your data or use it for any purposes other than mailing newsletters. Newsletter2Go is a German certified provider, selected in compliance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

You can find further information at: https://www.newsletter2go.de/informationen-newsletter-empfaenger/

You can withdraw your consent to the storage of your data, your e-mail address and its use for sending the newsletter at any time by clicking on the "unsubscribe" link in the newsletter.

Updating the privacy policy

Data protection measures are being continuously updated, for this reason we ask you to inform yourself about our data protection measures at regular intervals by consulting our data protection declaration.

Application of this privacy statement

The use of our website is subject to the provisions of this privacy statement. Please do not use our website if you do not agree with these regulations.

last updated: 24.09.2020