Your browserversion is not supported
We have detected a browser version (Internet Explorer 9 or older) that is not supported by our application (starting from Internet Explorer 11). This can lead to erroneuous representations of individual components of the internet site.

Data protection declaration

The data controller - within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection regulations is:

living-c eCommerce Solutions GmbH
Am Pfad 11
69469 Weinheim
Germany
Phone: +49 (0) 721 9527 9019
E-mail Address: privacy@living-c.de

1. Data processing general information

1.1. Purpose and scope of personal data processing

living-c eCommerce Solutions GmbH (hereinafter referred to as „LIVING-C“ oder „we“) processes user personal data only to the extent necessary to provide a functional website and our content and services. When you visit our websites, the following data is processed:

  • IP address
  • Browser (type, version, language)
  • Operating system
  • Date and time access
  • Files retrieved on our website
  • Website from which the user has reached our website

Processing and temporary saving of the IP address is necessary to enable the website to be delivered to the user's computer. Therefore, the user’s IP address must be saved for the duration of the session. The log files contain the IP addresses or other data that makes it possible to identify the user. The data is saved in the log files to ensure the functionality of the websites. The data also serves to optimise our websites, to ensure the security of our information technology systems and to detect and analyse attempts of fraud or attacks. Any processing of personal data is carried out exclusively for the aforementioned purposes and to the extent necessary to achieve these purposes. This data is not used for the purpose of advertisement, customer advice or market research.

1.2. Legal bases for the processing of personal data

Our users’ personal data is processed regularly with the user’s consent. Cases where prior consent cannot be obtained for real reasons constitute an exception and we are permitted to process the data by legal regulations. Data and log files are stored on the basis of Art. 6 Para. 1 (f) GDPR.

1.3. Data deletion and storage duration

The personal data of the person in question is deleted or blocked by us as soon as the purpose of the storage ceases to apply. In case of data processing for the provision of the websites, the deletion takes place once the respective session has ended. In case of storage of personal data in log files, the deletion takes place after 30 days. Extended storage is possible if the users’ IP addresses are deleted or altered beforehand, so it is no longer possible to allocate them to the accessing client.

2. Data processing when using our online shop

2.1. Order process

2.1.1 Scope of data processing

On our websites, you can place orders in our online shop. To process the order, we process the personal data you provide during the ordering process (including name, billing and delivery address, e-mail address, payment data). We use the data for order processing and, if necessary, for communication with you. Within the purpose of what is legally permissible, we pass on your data to our partner companies that support us in the proper fulfillment of the contract. These companies, in turn, are obligated to comply with the applicable data protection regulations. These companies may process the data exclusively for the fulfillment of their tasks on our behalf and only according to our instructions.
Partner company for the provision of the store system and other services (e.g., support): asknet Solutions AG

2.1.2 Legal basis

Data processing related to the ordering process is based on Art. 6 (1) lit. b DS-GVO, i.e., the processing of your data is necessary for order fulfillment.

2.1.3 Scope of data processing

The scope of data processing is the processing of purchase contracts concluded in our online shop as well as the implementation of customer support services. In addition, we also use your personal data to exercise rights arising from the contracts concluded or initiated with you.

2.1.4 Duration of personal data storage

We process your data for the duration of our contract. This also includes the initiation of a contract (pre-contractual legal relationship). Your data will be deleted after expiry of the retention periods under tax and commercial law. According to § 147 para. 1 of the German Fiscal Code (AO), these are a full 10 years for accounting documents and according to § 257 para. 1 of the German Commercial Code (HGB) a full 6 years for business documents. The provision of your personal data is necessary for the conclusion of a contract.

2.2. Credit Check

2.2.1 Scope of data processing

In order to prevent misconduct, we reserve the right to transfer your personal data (e.g. name, address) to credit agencies for the purpose of conducting a credit check. The transfer of data to credit agencies takes place exclusively within the purpose of what is legally permissible, for the analysis of your previous payment behavior as well as for the assessment of the risk of non-payment on the basis of mathematical-statistical procedures using address data as well as for the verification of your address (deliverability check). Depending on the result of the credit check, we may not be able to offer you individual payment methods. We pass on your data to our service provider Universum Payment Solution GmbH, Hanauer Landstraße 164, 60314 Frankfurt am Main, Germany, to the extent permitted by law. More detailed information can be found in the data protection information at Universum Group Privacy Policy

2.2.2 Legal basis

The legal basis for the transmission of your personal data for credit assessment is Art. 6 para. 1 lit. b and f DS-GVO. We have a legitimate interest in avoiding payment defaults.

2.2.3 Purpose and scope of data processing

The purpose of credit checks is to avoid and minimize payment defaults and the corresponding risks.

2.2.4 Duration of personal data storage

We process your data for the duration of our contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship). Your data will be deleted after expiry of the retention periods under tax and commercial law. According to § 147 para. 1 of the German Fiscal Code (AO), these are a full 10 years for accounting documents and according to § 257 para. 1 of the German Commercial Code (HGB) a full 6 years for business documents.
The provision of your personal data is required for a credit check.

2.3 Payment processing

In our online shop you only have the option to pay with Paypal.

2.3.1 PayPal

Payments can be made by means of PayPal. The European operator of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. Payments are processed through your PayPal account. If you do not have a PayPal account, it is possible to process virtual payments via credit cards. If you select "PayPal" as a payment option during the ordering process, your provided personal data will be transmitted to PayPal. The personal data transmitted to PayPal are usually first name, last name, address, e-mail address, IP address, telephone number, cell phone number or other data necessary for payment processing. Also necessary for the processing of the purchase contract are such personal data that are related to the respective order. The data transmitted to PayPal may be transmitted by PayPal to credit agencies. This transmission serves for identity and credit checks. More information on data protection at PayPal can be found at PayPal Privacy Policy
The legal basis for the data processing is Art. 6 para. 1 lit. b DS-GVO, i.e., the processing of your data is necessary for the fulfillment of the contract on a payment of your purchase via PayPal. The deletion of your data takes place after the expiry of the retention periods under tax and commercial law. These are a full 10 years for accounting documents in accordance with Section 147 (1) of the German Fiscal Code (AO) and a full 6 years for business documents in accordance with Section 257 (1) of the German Commercial Code (HGB).

The provision of your personal data is required for payment via PayPal. You are not required to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide such data could result in you not being able to use our websites or not being able to use them to their full extent.


3. E-mail contact

You can contact us via e-mail. If personal data is transmitted in the context of sending an e-mail, the legal basis is Art. 6 (1) lit. f DS-GVO. Should the e-mail contact aim at the conclusion of a contract, the legal basis for the processing is Art. 6 (1) lit. b DS-GVO. The data is used exclusively for processing the contact and the subsequent communication. In this context, the data will not be passed on to third parties. The personal data sent by e-mail will be deleted when the respective communication with the user has ended, i.e., as soon as it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us via e-mail, he can object to the storage of his personal data at any time. In such cases, the contact request cannot be processed, or the communication cannot be continued, and all personal data stored during this process us will be deleted.


4. Rights of the data subject

If living-c eCommerce Solutions GmbH processes your personal data, you are a data subject pursuant to Art. 4 No. 1 DS-GVO, with the following rights in relation with living-c eCommerce Solutions GmbH:

4.1 Right to access

4.2. Right to rectification

4.3. Right to be forgotten

4.4. Right to restriction of processing

4.5. Right to information

4.6. Right to data portability

4.7. Right to object

Pursuant to Art. 21 DS-GVO, you have the right to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) DS-GVO for reasons arising from your particular situation; this also applies to profiling based on these provisions. We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

4.8. Right to withdraw consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time in relation to us. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

4.9. Right to lodge a complaint with a supervisory authority

4.10. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time in relation to us. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

5. Content and information responsibility

Our web pages contain links to Internet offers of external providers. The contents of the Internet offer of external providers have been carefully checked by us when setting the link to see whether they violate civil or criminal law. However, it cannot be ruled out that these contents are subsequently changed by the respective providers. If you think that linked external pages violate applicable law or have other inappropriate content, please let us know. We will check and remove the external link if necessary. We are not responsible for the content and availability of linked external websites.

6. Webtracking and cookies

We use cookies on our websites. If a user access one of our web pages, a cookie may be stored on the user's operating system. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when our web pages are called up again. Among other things, the following data is stored and transmitted in the cookies:

  • Language settings
  • Log-in information
  • Shopping cart information

The purpose of the use of cookies is the user-friendly design of our websites. The processing of personal data using cookies is generally based on Art. 6 (1) lit. f DS-GVO, for some cookies and tools consent is obtained via a consent management tool (Art. 6 (1) lit. a DS-GVO). Cookies are stored on the user's computer and transmitted from there to our websites. Users can deactivate or restrict the transmission of cookies by changing the settings of their internet browser. Cookies that have already been stored can be deleted at any time. If cookies are deactivated for our websites, it may no longer be possible to use all the functions of our websites to their full extent.

6.1. UserCentrics Consent Management Platform

Service description

This is a consent management service. Usercentrics GmbH is used as a processor on the website for the purpose of consent management.

Processing company

Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany

Below you can find the e-mail address of the data protection officer of the processing company:
datenschutz@usercentrics.com

Data processing purposes

This list contains all (personal) data collected by or through the use of this service:

  • Einhaltung der gesetzlichen Verpflichtungen
  • Einwilligungsspeicherung

Technologies used

This list contains all the technologies that this service uses to collect data. Typical technologies are cookies and pixels placed in the browser.

  • Local Storage

Collected data

This list contains all (personal) data collected by or through the use of this service

  • Opt-in and opt-out data
  • Referrer URL
  • User Agent
  • User settings
  • Consent ID
  • Time of consent
  • Consent type
  • Template version
  • Banner language

Legal basis

The required legal basis for the processing of data is::

  • Art. 6 para. 1 p. 1 lit. f GDPR.

Place of processing

This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • European Union

Retention period

The retention period is the time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.
The consent data (consent and revocation of consent) is stored for three years.


Data recipients

This list contains all recipients of the data collected:

  • Usercentrics GmbH

Click here to read the privacy policy of the data processor
UserCentrics Privacy Policy

6.2 Steinberg Online Shop

Service description

Online shop for purchase of Steinberg products.

Processing company

living-c eCommerce Solutions GmbH
Am Pfad 11
69469 Weinheim
Germany

Below you can find the e-mail address of the data protection officer of the processing company:
privacy@living-c.de

Data processing purposes

This list contains all (personal) data collected by or through the use of this service:

  • Purchase
  • Delivery
  • Support

Technologies used

This list contains all the technologies that this service uses to collect data. Typical technologies are cookies and pixels placed in the browser.

  • Cookies

Collected data

This list contains all (personal) data collected by or through the use of this service

  • Session data for user recognition

Legal basis

The required legal basis for the processing of data is::

  • Art. 6 para. 1 p. 1 lit. f GDPR.

Place of processing

This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • Germany

Retention period

The retention period is the time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.

Data recipients

This list contains all recipients of the data collected:

  • living-c eCommerce Solutions GmbH
  • asknet Solutions AG

Click here to read the privacy policy of the data processor
Steinberg Online Shop Privacy Policy

Stored information

  • Name: shopsc Session Cookie; Stores a reference to the user's session; Type: cookie; Duration: 1 year; Domain: shop.steinberg.net;
  • Name: shoplc Login Cookie; Stores a reference to the user's login status; Type: cookie; Duration: 1 year; Domain: shop.steinberg.net;

6.3. Adobe Analytics

Service description

Service description

Adobe Analytics is a web analytics service used by living-c eCommerce Solutions GmbH, a reseller of Steinberg Online Shop and your contractual partner for all orders in our online shop. The analytics service is used exclusively on the online shop pages (shop.steinberg.net).

Processing company

Adobe Systems Software Ireland Limited
4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland

Below you can find the e-mail address of the data protection officer of the processing company:
DPO@adobe.com

Data processing purposes

This list contains all (personal) data collected by or through the use of this service:

  • Analysis

Technologies used

This list contains all the technologies that this service uses to collect data. Typical technologies are cookies and pixels placed in the browser.

  • Cookies

Collected data

This list contains all (personal) data collected by or through the use of this service

  • Ad Campaign success rates
  • Browser information
  • Click path
  • Clicked ads
  • Cookie ID
  • Date and time of access
  • Device information
  • Information provided by users in forms on this site
  • IP address
  • Connection speed
  • Items placed in the shopping cart
  • Website name
  • Personal information that users provide outside of the services
  • Product information such as colors, prices, styles, and photos
  • Purchase activity
  • Referrer URL
  • Search query when the user clicks on the link to this page
  • Usage data
  • Whether the user clicked on a link, image or text
  • Whether the user downloaded a file, image, or something else

Legal basis

The required legal basis for the processing of data is::

  • Art. 6 Abs. 1 p. 1 lit. a GDPR

Place of processing

This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • European Union

Retention period

The retention period is the period during which the collected data is stored for processing. The data will be deleted as soon as it is no longer necessary for the processing purposes.

Data recipients

This list contains all recipients of the data collected:

  • Adobe Inc.
  • Adobe Systems Software Ireland Limited

Click here to read the privacy policy of the data processor
Adobe Privacy Policy
Click here to opt-out on all domains of the processing company
Adobe Opt-Out

Storage information

Maximum limit for the storage of cookies: 2 years

Stored information

  • Name: AMCV_##@AdobeOrg; Identifies the same visitor in different Marketing Cloud solutions; Type: cookie; Duration: 2 years; Domain: Current Website;
  • Name: AMCVS_###@Adobe.Org; Cookie used to recognize new sessions to retrieve visitor ID; Type: cookie; Duration: session;
  • Name: demdex; The demdex cookie contains the demdex ID generated by the DCS; Type: cookie; Duration: 5 months, 27 days; Domain: demdex.net;
  • Name: s_cc; This cookie is set and read by the JavaScript code to determine if cookies are enabled (simply set to "True"); Type: cookie; Duration: Session;
  • Name: s_sq; This cookie is set and read by the JavaScript code when the ClickMap functionality and the Activity Map functionality are enabled; it contains information about the previous link the user clicked; Type: cookie; Duration: session;

6.4. Google AdWords Conversion

Service description

This is a conversion marketing service. This service helps websites measure the success of their Google Ads campaigns.

Processing company

Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Below you can find the contact form of the data protection officer of the processing company:
Google Data Privacy Contact Form


Data processing purposes

This list contains all (personal) data collected by or through the use of this service:

  • Advertising
  • Analysis
  • Conversion tracking

Technologies used

This list contains all the technologies that this service uses to collect data. Typical technologies are cookies and pixels placed in the browser.

  • Cookies

Collected data

This list contains all (personal) data collected by or through the use of this service

  • Ad Campaign success rates
  • Browser language
  • Browser type
  • Clicked ads
  • Cookie ID
  • IP address
  • Number of purchases made through advertisements
  • Web request

Legal basis

The required legal basis for the processing of data is::

  • Art. 6 Abs. 1 p. 1 lit. a GDPR

Place of processing

This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • European Union

Retention period

The retention period is the time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.

Data recipients

This list contains all recipients of the data collected:

  • Google LLC
  • Google Ireland Limited/li>
Click here to read the privacy policy of the data processor
Google Privacy Policy
Click here to opt-out on all domains of the processing company
Google Privacy Controls

Storage information

Maximum limit for the storage of cookies: 1 year

Stored information

  • Name: test_cookie; Set as a test to check if the browser allows cookies to be set. Does not contain any identifiers; Type: cookie; Duration: 15 minutes; Domain: doubleclick.net;
  • Name: IDE; Contains a randomly generated user ID. This ID allows Google to recognize the user across different websites and display personalized advertising; Type: cookie; Duration: 1 year; Domain: doubleclick.net;

6.5. Google Analytics

Service description

This is a web analytics service. It allows the user to measure advertising ROI and track Flash, video, and social networking sites and applications.

Processing company

Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Below you can find the e-mail address of the data protection officer of the processing company.
Google Data Privacy Contact Form


Data processing purposes

This list contains all (personal) data collected by or through the use of this service:

  • Marketing
  • Analysis

Technologies used

This list contains all the technologies that this service uses to collect data. Typical technologies are cookies and pixels placed in the browser.

  • Cookies
  • Pixel

Collected data

This list contains all (personal) data collected by or through the use of this service

  • App updates
  • Click path
  • Date and time of access
  • Device information
  • Downloads
  • Flash version
  • Location information
  • IP Address
  • JavaScript support
  • Visited pages
  • Purchase activity
  • Referrer URL
  • Usage data
  • Widget interactions
  • Browser information

Legal basis

The required legal basis for the processing of data is::

  • Art. 6 Abs. 1 p. 1 lit. a GDPR

Place of processing

This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • European Union

Retention period

The retention period is the time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes. The retention period depends on the type of data stored. Each customer can define how long Google Analytics retains data before it is automatically deleted.

Transfer to third countries

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the United States, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, without you potentially having any legal recourse. Below is a list of countries to which the data will be transferred. This may be for various purposes, such as storage or processing.

  • USA
  • Singapore
  • Chile
  • Taiwan

Data recipients

This list contains all recipients of the data collected:

  • Google LLC
  • Alphabet Inc.
  • Google Ireland Limited

Click here to read the privacy policy of the data processor
Google Privacy Policy
Click here to read the cookie policy of the data processor
Google Cookie Policy
Click here to opt-out on all domains of the processing company
Google Privacy Controls

Storage information

Maximum limit for the storage of cookies: 2 years

Stored information

  • Name: _ga; This is used to distinguish users; Type: cookie; Duration: 2 years;
  • Name: _gid; This is used to distinguish users; Type: cookie; Duration: 1 day;
  • Name: _gat ; Used to throttle the request rate; Type: cookie; Duration: 1 minute;
  • Name: _dc_gtm_xxx; This is used to distinguish users; Type: cookie; Duration: 1 minute;
  • Name: _gat_gtag_xxx; This is used to distinguish users; Type: cookie; Duration: 1 minute;
  • Name: _gac_xx; This contains information about which ad was clicked; Type: cookie; Duration: 2 months, 29 days;
  • Name: IDE; Using this ID, Google can recognize the user on various websites and domains and display personalized advertising; Type: cookie; Duration: 1 year;

6.6. SnowPlow

Service description

This is an analysis service.

Processing company

Steinberg Media Technologies GmbH
Beim Strohhause 31, 20097 Hamburg

Below you can find the e-mail address of the data protection officer of the processing company.
privacy@steinberg.de

Data processing purposes

This list contains all (personal) data collected by or through the use of this service:

  • Analysis
  • Event tracking

Technologies used

This list contains all the technologies that this service uses to collect data. Typical technologies are cookies and pixels placed in the browser.

  • Cookies

Collected data

This list contains all (personal) data collected by or through the use of this service

  • Browser-Version
  • Date and time of access
  • Viewed pages
  • Device type
  • Anonymized IP address
  • User ID
  • Browser language
  • Referrer-URL
  • Device operating system
  • Usage data
  • Clicked ad
  • URLs
  • Browser information
  • Number of pages visited

Legal basis

The required legal basis for the processing of data is::

  • Art. 6 para. 1 p. 1 lit. a GDPR

Place of processing

This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • Germany

Retention period

The retention period is the time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.

Data recipients

This list contains all recipients of the data collected:

  • Steinberg Media Technologies GmbH
  • Amazon Web Services LLC

Click here to read the privacy policy of the data processor
Steinberg Privacy Policy

Storage information

Maximum limit for the storage of cookies: 2 years
Non-cookie storage: No

Stored information

  • Name: _sp_id; Stores user information that is created when a user visits a site for the first time, and updated on subsequent visits. It is used to identify users and track user activity in a domain. This cookie stores a unique identifier for each user, a unique identifier for the user's current session, the number of times a user has visited the site, the timestamp of the user's first visit, the timestamp of their previous visit, and the timestamp of their current visit; Type: cookie; Duration: 2 years; Domain: steinberg.net;
  • Name: _sp_ses; Used to determine if the user is in an active session on a site or if this is a new session for a user (i.e. the cookie does not exist or has expired); Type: cookie; Duration: 30 minutes; Domain: steinberg.net;

Other service providers

Freshdesk

On our website, we use the Freshdesk CRM tool, a service of Freshworks Inc, 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA. We use Freshdesk to process customer enquiries and to provide an FAQ area for customers. The data you enter will be transmitted to Freshworks. We have entered into an order processing contract with Freshworks with the corresponding organizational and technical measures for data protection. For further information about data protection at Freshdesk, please visit Freshworks Privacy Notice. We use Freshdesk to process your requests quickly and efficiently. This represents a legitimate interest within the meaning of Art. 6 Para. 1 letter f GDPR.

7. Security

living-c eCommerce Solutions GmbH uses technical and organizational security measures in order to protect the personal data of users against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

8. Inclusion and validity of the privacy policy

This privacy policy applies only to the content of living-c eCommerce Solutions GmbH For linked external content, other data protection and data security provisions apply. You can find out who is responsible for these offers in the respective imprint. Due to the further development of our websites or the implementation of new technologies, it may become necessary to change this data protection declaration. We therefore reserve the right to change the data protection declaration at any time with effect for the future. The version available at the time of your visit to the website will always apply.

Version: February 2022