Data Protection Declaration according to GDPR
1. General Information
In the following, we would like to inform you about the collection of personal data when using our website. By using the website at www.cat-on.com, you provide us with information that makes you personally identifiable. This personal data includes information such as name, address, email address, and user behavior. In principle, we process personal data only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data generally only takes place if you have given us your consent or if processing is permitted by legal regulations.
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Furthermore, storage may occur if provided for by national or European regulations to which we are subject. In this case, blocking or deletion occurs when the storage period prescribed by the respective regulations expires, unless further storage is required for the conclusion or fulfillment of a contract. If we use contracted service providers for individual functions of our website or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below.
2. Controller
The party responsible (Controller) for data processing is: [THIS SECTION IS CURRENTLY UNDER REVISION]
3. Collection and Storage of Personal Data
When visiting our website, access data is stored in so-called server log files. These include:
IP address
Date and time of access
Pages visited
Amount of data transferred
This data serves to ensure trouble-free operation and is deleted after seven days. According to Art. 6 Para. 1 S. 1 lit. f GDPR, this serves to protect our legitimate interests in a correct presentation of our offer, which outweigh our interests in the context of a balancing of interests.
In the context of customer communication, we collect personal data to process your inquiries according to Art. 6 Para. 1 S. 1 lit. b GDPR if you voluntarily provide them when contacting us (e.g., via contact form or email). Mandatory fields are marked as such. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use according to Art. 6 Para. 1 S. 1 lit. a GDPR.
4. Data Collection and Use for Contract Fulfillment and Opening a Customer Account
We collect personal data if you voluntarily provide it as part of your order, when contacting us, or when opening a customer account. According to Art. 6 Para. 1 S. 1 lit. b GDPR, we use this data for contract processing and handling your inquiries. After complete fulfillment of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of tax and commercial retention periods, unless you have expressly consented to further use.
For the fulfillment of the contract, we pass your data to the shipping company commissioned with the delivery. Depending on the payment service provider selected, we pass the payment data to the credit institution or payment service provider commissioned with the payment.
If you have given your express consent according to Art. 6 Para. 1 S. 1 lit. a GDPR, we will pass your email address and telephone number to the selected shipping service provider (e.g., DHL, DPD, FedEx, TNT, UPS, EMONS) so that they can contact you for delivery notification or coordination. This consent can be revoked at any time.
5. Disclosure of Data
(This section reinforces Section 4 regarding the transfer of data to shipping and payment providers for the purpose of contract fulfillment according to Art. 6 Para. 1 S. 1 lit. b GDPR).
6. Email Newsletter and Postal Advertising
a) Email advertising with newsletter registration If you register for our newsletter, we use the data required or separately provided by you to send you our email newsletter based on your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR. You may unsubscribe at any time.
b) Postal advertising and your right to object We reserve the right to use your first and last name as well as your postal address for our own advertising purposes (e.g., sending offers via letter) based on our legitimate interests according to Art. 6 Para. 1 S. 1 lit. f GDPR.
c) uptain To improve interaction, we use a plugin from uptain GmbH. This allows us to analyze your use of the website (cursor movement, dwell time, links clicked) to improve customer communication. The legal basis is our legitimate interest according to Art. 6 Para. 1 lit. f GDPR. You can deactivate this at: https://www.cat-on.com/datenschutz?__up_tracking_unsubscribe
7. Data Use for Payment Processing
Credit Check and Scoring for PayPal Invoice (BillSAFE) If you choose "Purchase on account" via PayPal/BillSAFE, you consent to the transfer of data required for identity and credit checks to PayPal according to Art. 6 Para. 1 S. 1 lit. a GDPR. Detailed information is available in PayPal's privacy policy. You can revoke this consent at any time towards PayPal.
8. Cookies and Web Analysis
We use cookies to make our website attractive and enable certain functions (Art. 6 Para. 1 S. 1 lit. f GDPR).
Session Cookies: Deleted after closing the browser.
Persistent Cookies: Remain on your device to recognize your browser on the next visit.
Google Analytics & DoubleClick Provided you have given consent (Art. 6 Para. 1 S. 1 lit. a GDPR), this website uses Google Analytics and the DoubleClick cookie for advertising purposes. IP anonymization is active. Google LLC is based in the USA and was certified under the EU-US Privacy Shield (Note: now managed under the Data Privacy Framework). You can revoke consent via browser plugins or opt-out links.
9. Advertising via Marketing Networks
Google AdSense & AdWords Remarketing If you have consented, we use Google AdSense for third-party ads and AdWords Remarketing for interest-based advertising. Data is processed to create target group lists for cross-device marketing. You can revoke consent at any time by deactivating the remarketing cookie.
10. Social Media Plugins
We use plugins from Facebook, Twitter, Pinterest, Flickr, Google+, and Instagram. When you access a page containing such a plugin, your browser connects directly to the providers' servers (possibly in the USA). This serves our legitimate interest in optimal marketing (Art. 6 Para. 1 S. 1 lit. f GDPR). To prevent data collection, please log out of social networks before visiting our site or use browser add-ons like "NoScript."
11. WhatsApp Chat
We use the WhatsApp Ireland Limited live chat tool for optimized customer communication (Art. 6 Para. 1 S. 1 lit. f GDPR). Only numbers of customers who have already contacted us via WhatsApp are processed. Data may be processed on servers of Meta Platforms, Inc. in the USA based on Standard Contractual Clauses.
12. Contact Options and Your Rights
As a data subject, you have the following rights:
Art. 15 GDPR: Right to access your stored data.
Art. 16 GDPR: Right to rectification of incorrect data.
Art. 17 GDPR: Right to erasure ("right to be forgotten").
Art. 18 GDPR: Right to restriction of processing.
Art. 20 GDPR: Right to data portability.
Art. 21 GDPR: Right to object to processing.
Art. 77 GDPR: Right to lodge a complaint with a supervisory authority.
For questions regarding data protection, please contact us directly using the details in our Legal Notice or email privacy@cat-on.com.
Right to Object
If we process personal data to protect our legitimate interests (balancing of interests), you have the right to object to this processing with effect for the future. If processing is for direct marketing, you can exercise this right at any time. For other purposes, the right to object exists only for reasons arising from your particular situation.