Privacy Policy

Protecting your personal data is important to us. Below we explain which personal data is processed when you use our online shop and for what purposes.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Ariasat Digital Sat-Systems e.K.
Owner: Zeki Sevinc
Keplerstr. 96
41236 Mönchengladbach
Germany

Telephone: +49 2166 621419
Email: info@ariasat.de

2. General information on the processing of personal data

We process personal data only where necessary to operate our online shop, respond to enquiries, fulfil orders or comply with legal obligations, or where another legal basis under the GDPR applies.

Personal data is information relating to an identified or identifiable natural person, such as a name, address, email address, telephone number, order details or technical usage data.

3. Server log files

When you visit our website, our web server or hosting provider may process technical information, including:

IP address of the accessing device
Date and time of access
Page or file requested
Amount of data transferred
Browser type and version
Operating system
Referrer URL
Information about successful or unsuccessful requests

Where personal data is involved, processing is carried out in particular to provide a secure, reliable website and detect or prevent technical attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of our online shop.

Data is deleted when it is no longer needed for these purposes, unless legal or security-related reasons require further retention.

4. Orders and contract fulfilment

When you place an order, we process the data necessary to fulfil it. This may include:

Name and address
Billing and delivery address
Email address and, where applicable, telephone number
Products ordered and order details
Selected delivery method
Selected payment method
Information necessary for payment and contract fulfilment

Processing is based on Article 6(1)(b) GDPR for entering into, performing and completing the purchase contract.

Where commercial or tax law requires us to retain business records, further processing is based on Article 6(1)(c) GDPR.

5. Customer account and registration

You may create a customer account in our online shop. We process the information you provide to make the account available and enable functions such as managing your details and viewing your orders.

Processing for pre-contractual measures and existing contractual relationships is based on Article 6(1)(b) GDPR.

You may request deletion of your customer account unless statutory retention obligations or other legal grounds prevent deletion.

6. Contacting us

If you contact us by email or through a contact form, we process the information you provide to handle and answer your enquiry.

If your enquiry relates to a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. For other enquiries, processing is generally based on Article 6(1)(f) GDPR; our legitimate interest is responding appropriately to customers and prospective customers.

Where processing is expressly based on your consent, the legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

7. SSL/TLS encryption

Our website uses SSL/TLS encryption to protect transmitted data against unauthorised access by third parties. You can generally recognise an encrypted connection by HTTPS in your browser.

8. Cookies and technically necessary storage

Our online shop uses cookies and comparable technical storage mechanisms where necessary for its operation and the shop functions you request.

Cookies are small pieces of information that may be stored on your device. Technically necessary cookies may be required for the shopping cart, login, language settings, session information or security functions.

Where storing information on your device or accessing information already stored there is strictly necessary to provide a digital service you expressly request, consent is not required under Section 25(2) TDDDG.

Where personal data is processed, the legal basis is additionally determined by the GDPR, in particular Article 6(1)(b) or (f).

If we use non-essential cookies or comparable technologies in the future that require consent, these will generally be used only after you have given that consent.

9. Payment processing

Depending on your selected payment method, we process the data necessary to complete your order and, where required, transmit it to the relevant payment service provider or financial institution.

Processing for performance of the purchase contract is based on Article 6(1)(b) GDPR.

PayPal

If you choose PayPal, the information required for payment processing is transmitted to PayPal. PayPal processes this information under its own privacy provisions.

Where necessary to carry out your chosen payment method, transmission is based on Article 6(1)(b) GDPR.

For bank transfers, the participating financial institutions process the information required to complete the payment.

10. Shipping and delivery

To deliver your order, we transmit the information necessary for delivery to the shipping or transport company responsible.

This includes in particular your name, delivery address and, where necessary for the specific delivery, other shipping information.

Processing and transmission for performance of the purchase contract are based on Article 6(1)(b) GDPR.

10a. Electronic withdrawal function

If you withdraw from a contract using our electronic withdrawal function, we process the information you provide to receive, confirm, examine, handle and document your withdrawal. This includes in particular your name, email address, order number, details and quantities of the products concerned, your withdrawal declaration, information about receipt of the goods and, where applicable, the date of receipt, as well as the date and time your declaration reaches us.

The information is stored in a separate withdrawal database in our shop system. As part of further handling, we may also process the processing status, internal notes, information on returns and delivery, and refunds. We send an acknowledgement of receipt to the email address provided and notify the responsible team of your withdrawal.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to handle the contractual relationship and withdrawal, and Article 6(1)(c) GDPR where we fulfil legal obligations, particularly receipt and confirmation of the withdrawal declaration and statutory retention requirements.

We retain the information for as long as needed to handle the withdrawal and meet statutory retention obligations. Where withdrawal declarations and related correspondence must be retained as commercial or business letters, the usual retention period is six years from the end of the calendar year in which they were received or sent. Different statutory periods may apply to separate invoices and accounting records. Individual details are deleted when no longer required and no other legal basis applies. Ongoing litigation or statutory retention grounds may require longer storage.

Only staff responsible for handling the withdrawal and service providers necessary for that purpose may access the data. Data is shared only where required to process the withdrawal or comply with legal obligations. Further information about recipients, your privacy rights and the controller appears in the other sections of this notice.

11. Statutory retention obligations

After completion of the contract, data is generally deleted unless statutory retention obligations apply.

Commercial and tax law may require invoices, accounting documents and other business records to be retained for the respective statutory period.

Processing during this retention period is based on Article 6(1)(c) GDPR.

12. Recipients of personal data

Where necessary, personal data may be disclosed in particular to the following categories of recipients:

Hosting and IT service providers
Shipping and transport companies
Payment service providers and financial institutions
Tax advisers and other professional advisers where necessary
Authorities and public bodies where legally required

Personal data is disclosed only where a legal basis exists.

13. Your rights

Subject to the statutory requirements, you have in particular the following rights:

Right of access under Article 15 GDPR
Right to rectification under Article 16 GDPR
Right to erasure under Article 17 GDPR
Right to restriction of processing under Article 18 GDPR
Right to data portability under Article 20 GDPR
Right to object under Article 21 GDPR

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.

14. Right to object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right, under the conditions of Article 21 GDPR, to object at any time on grounds relating to your particular situation.

To exercise your rights, please contact:

Ariasat Digital Sat-Systems e.K.
Email: info@ariasat.de

15. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.

The data protection supervisory authority of North Rhine-Westphalia is among the authorities responsible for our registered office.