Privacy Policy

The protection of your personal data is important to us. The following information explains which personal data is processed when you use our online shop and for what purposes.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Ariasat Digital Sat-Systems e.K.
Owner: Zeki Sevinc
Keplerstr. 96
41236 Mönchengladbach
Germany

Phone: +49 2166 621419
E-mail: info@ariasat.de

2. General information on the processing of personal data

We process personal data only insofar as this is necessary to provide our online shop, process enquiries, fulfil orders or comply with legal obligations, or where another legal basis under the GDPR applies.

Personal data means any information relating to an identified or identifiable natural person. This may include your name, address, e-mail address, telephone number, order information and technical usage data.

3. Server log files

When you access our website, technically necessary information may be processed by the web server or hosting provider. This may include:

IP address of the accessing device,
date and time of access,
requested page or file,
amount of data transferred,
browser type and version,
operating system,
referrer URL, and
information concerning successful or failed requests.

Where this information constitutes personal data, it is processed in particular to ensure the secure and reliable operation of our website and to detect and prevent technical attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of our online shop.

The data is deleted when it is no longer required for these purposes, unless legal or security-related reasons require further storage.

4. Orders and contract processing

When you place an order through our online shop, we process the information required to process and fulfil your order. This may include:

name and address,
billing and delivery address,
e-mail address and, where applicable, telephone number,
products ordered and order information,
selected shipping method,
selected payment method, and
information required for payment and contract processing.

The processing is carried out for the initiation, performance and processing of the purchase contract on the basis of Art. 6(1)(b) GDPR.

Where we are required by commercial or tax law to retain certain business documents, further processing is based on Art. 6(1)(c) GDPR.

5. Customer account and registration

You may create a customer account in our online shop. We process the information you provide in order to provide the customer account and functions such as managing your personal information and viewing your orders.

The processing is based on Art. 6(1)(b) GDPR for the implementation of pre-contractual measures and the performance of existing contractual relationships.

You may request deletion of your customer account unless statutory retention requirements or other legal grounds prevent deletion.

6. Contacting us

If you contact us by e-mail or through a contact form, we process the information you provide in order to process and respond to your enquiry.

If your enquiry relates to an existing contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. Other enquiries are generally processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the appropriate processing of customer and prospective customer enquiries.

Where processing is expressly based on your consent, Art. 6(1)(a) GDPR applies. You may withdraw your consent at any time with effect for the future.

7. SSL/TLS encryption

Our website uses SSL/TLS encryption to protect transmitted data against unauthorised access by third parties. An encrypted connection can generally be recognised by the HTTPS connection displayed by your browser.

8. Cookies and technically necessary storage

Our online shop uses cookies and comparable technical storage mechanisms insofar as they are necessary for the operation of the shop and the functions requested by you.

Cookies are small pieces of information that may be stored on your device. Technically necessary cookies may be required, for example, to provide a shopping cart, login, language settings, session information or security-related functions.

Where the storage of information on your device or access to information already stored on your device is strictly necessary to provide a digital service expressly requested by you, consent is not required pursuant to Section 25(2) TDDDG.

Where personal data is processed, the applicable legal basis is additionally determined by the GDPR, in particular Art. 6(1)(b) or (f) GDPR.

If we use non-essential cookies or comparable technologies requiring consent in the future, these will generally only be used after you have given the required consent.

9. Payment processing

Depending on the payment method you select, the information required for payment processing is processed and, where necessary, transmitted to the relevant payment service provider or financial institution.

The processing is carried out for the performance of the purchase contract on the basis of Art. 6(1)(b) GDPR.

PayPal

If you select PayPal as your payment method, the information required to process the payment is transmitted to PayPal. PayPal processes this information in connection with payment processing in accordance with PayPal's applicable privacy provisions.

Where the transmission is necessary to provide the payment method selected by you, it is based on Art. 6(1)(b) GDPR.

If you pay by bank transfer, the information required for payment processing is processed by the participating financial institutions.

10. Shipping and delivery

For the delivery of your order, we transmit the information required for delivery to the shipping or transport company commissioned with the delivery.

This includes in particular your name, delivery address and, where necessary for the specific delivery, additional shipping information.

The processing and transmission are carried out for the performance of the purchase contract on the basis of Art. 6(1)(b) GDPR.

11. Statutory retention obligations

After the contract has been fully processed, personal data is generally deleted unless statutory retention obligations apply.

Commercial and tax legislation in particular may require invoices, accounting records and other business-related documents to be retained for the applicable statutory period.

Processing during such statutory retention periods is based on Art. 6(1)(c) GDPR.

12. Recipients of personal data

Where necessary, personal data may in particular be transmitted to the following categories of recipients:

hosting and IT service providers,
shipping and transport companies,
payment service providers and financial institutions,
tax advisers and other professional advisers where required,
authorities and public bodies where required by law.

Personal data is only disclosed where there is a legal basis for doing so.

13. Your rights

Subject to the applicable statutory requirements, you have in particular the following rights:

right of access pursuant to Art. 15 GDPR,
right to rectification pursuant to Art. 16 GDPR,
right to erasure pursuant to Art. 17 GDPR,
right to restriction of processing pursuant to Art. 18 GDPR,
right to data portability pursuant to Art. 20 GDPR, and
right to object pursuant to Art. 21 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

14. Right to object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, subject to the requirements of Art. 21 GDPR, to object at any time on grounds relating to your particular situation.

To exercise your rights, you may contact:

Ariasat Digital Sat-Systems e.K.
E-mail: info@ariasat.de

15. Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.

In particular, the data protection supervisory authority of the German state of North Rhine-Westphalia is responsible for our place of business.