Privacy policy

General notice and mandatory information
Designation of the responsible body
The responsible body for data processing on this website is:
Metaliccards UG Fabian Berndt Lärchenweg 21 38667 Bad Harzburg The responsible body decides alone or jointly with others on the purposes and means of processing personal data (e.B. names, contact details, etc.)
Revocation of your consent to data processing
Only with your express consent are some data processing operations possible. A revocation of your already given consent is possible at any time. For the revocation, an informal notification by e-mail is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to lodge a complaint with the competent supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority with regard to data protection issues is the state data protection officer of the federal state in which the registered office of our company is located. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. Provision is made in a machine-readable format. If you request the direct transfer of the data to another controller, this will only take place to the extent that it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and by the lock symbol in the browser line.
Server log files
In server log files, the provider of the website automatically collects and stores information that your browser automatically transmits to us. These are:
  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP Address
There is no merging of this data with other data sources. The basis for data processing is Art. 6 para. 1 lit.b GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures.
Data transmission at the conclusion of the contract for the purchase and dispatch of goods
Personal data will only be transmitted to third parties if there is a need in the context of the execution of the contract. Third parties can be, for example, payment service providers or logistics companies. A further transmission of the data does not take place or only if you have expressly consented to this.
The basis for data processing is Art. 6 para. 1 lit.b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
Registration on this website
You can register on our website to use certain functions. The transmitted data are used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be given in full. Otherwise we will refuse the registration.
In the event of important changes, e.g. for technical reasons, we will inform you by email. The e-mail will be sent to the address that was given during registration.
The processing of the data entered during registration is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal e-mail notification is sufficient for the revocation. The legality of the data processing that has already taken place remains unaffected by the revocation.
We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.
Contact form
Data transmitted via the contact form, including your contact details, will be stored in order to be able to process your request or to be available for follow-up questions. This data will not be passed on without your consent.
The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal e-mail notification is sufficient for the revocation. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need to store data. Mandatory statutory provisions - in particular retention periods - remain unaffected.
Storage duration of contributions and comments
Contributions and comments as well as related data, such as IP addresses, are saved. The content remains on our website until it has been completely deleted or had to be deleted for legal reasons.
The storage of the contributions and comments takes place on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal e-mail notification is sufficient for the revocation. The legality of data processing operations that have already taken place remains unaffected by the revocation.
Newsletter Data
We need an email address from you to send our newsletter. A verification of the specified email address is necessary and the receipt of the newsletter must be consented to. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.
The data provided when registering for the newsletter are processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal e-mail notification is sufficient for the revocation or you can unsubscribe using the “Unsubscribe” link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
Data entered to set up the subscription will be deleted if you cancel. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.
Transfer of personal data to shipping service providers
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will give your e-mail address in accordance with Article 6 (1) (a) GDPR prior to delivery of the goods for the purpose of coordination of a delivery date or delivery notification to DHL, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. It will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible. The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL.
YouTube
Our website uses plugins from YouTube to integrate and display video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with an integrated YouTube plug-in, a connection to the YouTube servers is established. This tells YouTube which of our pages you have accessed. YouTube can assign your surfing behavior directly to your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand. YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR. You can find details on handling user data in YouTube's data protection declaration at: https://www.google.de/intl/de/policies/privacy.
Cookies
Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics uses "cookies." These are small text files that your web browser saves on your device and that enable website usage to be analyzed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.
Google Analytics cookies are set on the basis of Art. 6 Para. 1 lit.f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.
IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and abbreviates it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.
Browser plugin
The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website. You can also prevent the collection of data relating to your website usage including your IP address and subsequent processing by Google. You can do this by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to our website: Deactivate Google Analytics.
You can find details on how user data is handled by Google Analytics in Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
In order to fully comply with the statutory data protection requirements, we have concluded an order processing contract with Google.
Demographic characteristics in Google Analytics
Our website uses the “demographic characteristics” function of Google Analytics. It can be used to create reports that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. You can do this via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section “Objection to data collection”.
PayPal
Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you pay with PayPal, the payment data you have entered will be transmitted to PayPal.
Your data is transmitted to PayPal on the basis of Art. 6 Paragraph 1 lit. a GDPR (consent) and Art. 6 Paragraph 1 lit. b GDPR (processing to fulfill a contract). You can revoke your already given consent at any time. Data processing operations in the past remain effective in the event of a revocation.
Instant Transfer / Direct transfer
Our website allows payment via "Instant Transfer." The payment service provider is Sofort GmbH, Theresienhöhe 12, 80339 Munich.
With the help of the “Instant Transfer” process, we receive a real-time payment confirmation from Sofort GmbH and can immediately begin to meet our obligations.
When paying by “Instant Transfer”, your PIN and TAN are transmitted to Sofort GmbH. The payment provider logs into your online banking account, automatically checks your account balance and makes the transfer. An immediate confirmation of the transaction follows. Your sales, the credit line of your overdraft facility and the existence of other accounts as well as their stocks are also automatically checked after logging in.
In addition to PIN and TAN, the transmission to Sofort GmbH also includes payment data and personal data. Your personal data includes your first and last name, address, telephone number (s), email address, IP address and any other data necessary for payment processing. This data transfer is necessary in order to establish your identity beyond any doubt and to prevent attempted fraud.
The transfer of your data to Sofort GmbH takes place on the basis of Art. 6 Paragraph 1 lit. a GDPR (consent) and Art. 6 Paragraph 1 lit. b GDPR (processing to fulfill a contract). You can revoke your already given consent at any time. Data processing operations in the past remain effective in the event of a revocation.
You can find details on payment with immediate transfer at: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.
Google AdWords and Google Conversion Tracking
Our website uses Google AdWords. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States.
AdWords is an online advertising program. We work with conversion tracking as part of the online advertising program. After clicking on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that your web browser stores on your device. Google AdWords cookies lose their validity after 30 days and are not used to personally identify users. Google and we can tell from the cookie that you clicked on an ad and were redirected to our website.
Every Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. Adwords customers find out how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that enables users to be personally identified. If you do not want to participate in tracking, you can object to its use. Here the conversion cookie must be deactivated in the user settings of the browser. This means that there is no inclusion in the conversion tracking statistics.
The storage of “conversion cookies” takes place on the basis of Art. 6 Para. 1 lit. f GDPR. As a website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.
You can find details on Google AdWords and Google Conversion Tracking in Google's data protection provisions: https://www.google.de/policies/privacy/.
With a modern web browser you can monitor, restrict or prevent the setting of cookies. Deactivating cookies can limit the functionality of our website.
Facebook Pixel
In order to use our Facebook campaigns as required, to further optimize them and to measure their conversion, we use an individual so-called visitor action pixel from Facebook Ireland Ltd. (hereinafter "Facebook") on the basis of Art. 6 Para. 1 lit. ), 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. This pixel is integrated into the code of our website. On the one hand, we can ensure that the Facebook ads we initiate are only displayed to Facebook users who have also shown an interest in our offer. This ensures that our Facebook ads correspond to the potential interest of the respective user and do not bother them. On the other hand, we can track the actions of Facebook users after they have seen or clicked one of our Facebook ads. This helps us to measure the conversion of the respective campaign for statistical and market research-related as well as billing purposes. The following information is processed during use:
Time stamp, URL, campaign-related information (in particular specification of the impression, form field, activated button).
The data collected in this way is anonymous to us and does not allow us to draw any conclusions about the identity of the respective user. The processing that takes place in this way for behavioral and interest-based advertising purposes is to be regarded as our recognized legitimate interest in accordance with recital 47 of the GDPR. The data is stored in accordance with the statutory retention periods and then automatically deleted. If you log into your Facebook account after placing the pixel or if you visit our website while logged in, it is possible that this data will be saved and processed by Facebook, which we would like to inform you about. Facebook can connect this data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook's data usage policy. You can find more information about Facebook Pixel here. You can enable Facebook and its partners to place advertisements on and outside of Facebook. You can object to this special data processing at any time by either changing your Facebook settings accordingly or simply informing us that you no longer want this type of processing in the future. For this purpose, please use the contact options of our company data protection officer. Please be aware that the declared contradiction only applies to the device used. For more information, please refer to Facebook's privacy policy and information on protecting your privacy.
Facebook Lookalike Campaigns
For target group-optimized control of our Facebook campaigns and to measure their conversion, we use the possibility of creating so-called Facebook lookalike audiences, which we receive from the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. You can find more information about Facebook's lookalike campaigns on Facebook at: https://www.facebook.com/business/help/365463786964246. According to Recital 47 of the GDPR, this processing for behavioral and interest-based advertising purposes is to be regarded as our recognized legitimate interest. In the event that you are part of the Facebook lookalike audience, we will transmit your email address and your device ID to Facebook. You can object to this special data processing at any time by either changing your Facebook settings here or by informing us that you no longer want this processing in the future. For this purpose, please use the contact options of our company data protection officer.

Source: Data Protection Configurator

Newsletter Subscribe now

We will not spam your email.