Privacy Policy

Privacy Policy for the "CapUniverse" online shop by ANTHEC GmbH & Co. KG in the B2C sector. We are pleased about your interest in our website. The protection of your privacy is very important to us. Below, we inform you in detail about the handling of your data.

1. Name and contact details of the controller and the corporate data protection officer:

ANTHEC GmbH & Co. KG, Willy-Brandt-Weg 36, 48155 Münster
Tel.: 0800 22777467
datenschutz@capuniverse.com

The external corporate data protection officer of ANTHEC GmbH & Co. KG can be reached for you at the following contact details:
Markus Weber
dokuworks GmbH
Essener Str. 1
57234 Wilnsdorf
datenschutz@doku.works

2. Collection and storage of personal data as well as the nature and purpose of its use

a. Visiting our website
When you access our website, information is sent to the server of our website by the browser used on your device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the accessed file,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The data mentioned is processed by us for the following purposes:
• Ensuring a smooth connection setup of the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability as well as
• for further administrative purposes.
The legal basis for data processing is Art. 6 Para. 1 Sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

b. Order and customer account
For your order and/or the creation of a customer account, we require your name, address, delivery, and payment details. Furthermore, we require your email address for order and shipping confirmation and as identification for the customer login. We collect, store, and process this data for the processing of the purchase, including any warranty, for technical administration, as well as for our service and marketing purposes. The legal basis for data processing is the performance of contractual measures according to Art. 6 Para. 1 Sentence 1 lit. b GDPR or the legitimate interest according to Art. 6 Para. 1 Sentence 1 lit. f GDPR.
Upon complete execution of the contract and full payment of the purchase price, your data will be blocked for further use and deleted after the expiry of tax and commercial retention periods, provided you have not expressly consented to the further use of your data.

c. Product reviews
If users leave reviews on our website, the time of their creation and the username previously chosen by the customer are stored in addition to this information. This serves our security, as we can be held liable for illegal content on our website even if it was created by users. The legal basis for data processing is Art. 6 Para. 1 Sentence 1 lit. f GDPR.

d. Newsletter
For the distribution of the newsletter, we use the so-called double opt-in procedure, i.e., we will only send you a newsletter via email once you have expressly confirmed it to us beforehand. We will then send you a notification email and ask you to confirm by clicking a link contained in this email that you wish to receive our newsletter. For this, we log the subscription to the newsletter, the sending of a confirmation email, and the receipt of the requested response. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties. The legal basis for data processing is your consent according to Art. 6 Para. 1 Sentence 1 lit. a GDPR.
Right of withdrawal: Should you later no longer wish to receive newsletters from us, you can object to this at any time without incurring costs other than the transmission costs according to the basic tariffs. A notification in text form to the contact details mentioned in Section 1 (e.g., email, fax, letter, telephone) of the controller is sufficient for this. Of course, you will also find an unsubscribe link in every newsletter.

e. Product recommendations via email
As a customer of Capuniverse, you will regularly receive product recommendations from us via email. You receive these product recommendations from us regardless of whether you have subscribed to a newsletter. In doing so, we use the email address provided by you during the purchase to promote our own goods and/or services that are similar to those you have purchased from us based on an order already placed. In this way, we want to provide you with information about products from our range that might interest you based on your recent purchases with us. The legal basis for data processing is our legitimate interest according to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

Right of withdrawal:
If you no longer wish to receive product recommendations or any advertising messages from us at all, you can object to this at any time without incurring costs other than the transmission costs according to the basic tariffs. A notification in text form to the contact details mentioned in Section 1 (e.g., email, fax, letter) of the controller is sufficient for this. Of course, you will also find an unsubscribe link in every email.

3. Use of cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device, contain no viruses, Trojans, or other malicious software.
Information is stored in the cookie, which results in each case in connection with the specifically used device. However, this does not mean that we obtain direct knowledge of your identity through this.
The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific set period. If you visit our site again to use our services, it will automatically be recognized that you were already with us and what inputs and settings you made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies allow us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined time. The data processed by cookies is required for the aforementioned purposes to protect our legitimate interests as well as those of third parties according to Art. 6 Para. 1 Sentence 1 lit. f GDPR.
Most browsers accept cookies automatically. You can, however, configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. The complete deactivation of cookies may, however, lead to you not being able to use all the functions of our website.

4. Google services

a. Google Analytics
For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized usage profiles are created and cookies (see Section 4) are used. The information generated by the cookie about your use of this website such as
• Browser type/version,
• Operating system used,
• Referrer URL (the previously visited page),
• Hostname of the accessing computer (IP address),
• Time of the server request,
is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities, and to provide other services associated with website use and internet use for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of others. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking).
You can prevent the installation of cookies by setting your browser software accordingly; however, we point out that in this case, not all functions of this website may be fully usable.
Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set that prevents future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de). The processed data is required for the aforementioned purposes to protect our legitimate interests as well as those of third parties according to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

b. Google Adwords
Our website uses the Google Adwords service. Google AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

In this context, we use the remarketing function within the Google AdWords service. With the remarketing function, we can present users of our website with interest-based advertisements on other websites within the Google Display Network (on Google itself, so-called “Google Ads” or on other websites). For this, the interaction of the users on our website is analyzed, e.g., which offers the user was interested in, in order to be able to display targeted advertising to users even after they have visited our website on other pages. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network. Through this number, referred to as a “cookie”, the visits of these users are recorded. This number serves to uniquely identify a web browser on a specific computer and not to identify a person; personal data is not stored. The legal basis for this data processing is Article 6 Para. 1 Letter f) GDPR. You can deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: www.google.com/settings/ads/plugin. Further information on Google Remarketing as well as Google's privacy policy can be viewed at: www.google.com/privacy/ads/ The processed data is required for the aforementioned purposes to protect our legitimate interests as well as those of third parties according to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

c. Google Conversion Tracking
Furthermore, we use so-called conversion tracking as part of the use of the Google AdWords service. If you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer/device. These cookies expire after 30 days, do not contain any personal data, and are therefore not used for personal identification. The information obtained with the help of the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking.
You can prevent the storage of cookies by setting your browser software accordingly; however, we point out to you that in this case, you may not be able to use all functions of this website to their full extent. Furthermore, you can deactivate interest-based ads on Google as well as interest-based Google ads on the web (within the Google Display Network) in your browser by activating the “Off” button at http://www.google.de/settings/ads or performing the deactivation at http://www.aboutads.info/choices/. Further information on your related setting options and data protection at Google can be found at: https://www.google.de/intl/de/policies/privacy/?fg=1. The processed data is required for the aforementioned purposes to protect our legitimate interests as well as those of third parties according to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

5. Social Plugins

Our website uses social plugins (“plugins”) from various social networks. With the help of these plugins, you can share content or recommend products. The plugins are deactivated by default on our website and therefore do not send any data.
By clicking on the respective button, you can activate the plugins. When these plugins are activated, your browser establishes a direct connection to the servers of the respective social network as soon as you access a webpage of our online presence. The content of the plugin is transmitted by the social network directly to your browser and incorporated by it into the webpage. By integrating the plugins, the social network receives the information that you have accessed the corresponding page of our online presence.
If you are logged into the social network, it can assign the visit to your account. If you interact with the plugins, for example, press the Facebook “Like” button or leave a comment, the corresponding information is transmitted from your browser directly to the social network and stored there. For the purpose and scope of data collection and the further processing and use of the data by social networks, as well as your rights in this regard and setting options for the protection of your privacy, please refer to the privacy policies of the respective networks or websites. You can find the links to these below.
Even if you are not logged into the social networks, data can be sent to the networks from websites with active social plugins. Through an active plugin, a cookie with an identifier is set every time the website is accessed. Since your browser sends this cookie along unprompted with every connection to a network server, the network could theoretically create a profile of which websites the user belonging to the identifier has accessed. And it would then also be quite possible to assign this identifier to a person later – for example, when later logging into the social network. On our websites, we use the following plugins: Facebook, X, and Pinterest. If you do not want social networks to collect data about you via active plugins, you can either simply deactivate the social plugins with a click on our websites or choose the function “Block third-party cookies” in your browser settings. Then the browser will not send any cookies to the server for embedded content from other providers. With this setting, however, other cross-page functions may possibly no longer work besides the plugins.
On our website, we use the following plugins: Facebook, X, Instagram, and Youtube. The processed data is required for the aforementioned purposes to protect our legitimate interests as well as those of third parties according to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

a. Facebook
We use plugins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The link to the privacy policy of Facebook Inc can be found here: Facebook Privacy Policy: https://www.facebook.com/about/privacy

b. X
We use plugins from the social network X, which is operated by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. The link to the privacy policy of X can be found here: https://twitter.com/de/privacy.

c. Instagram
We use plugins from the social network Instagram LLC, 1601 Willow Rd Menlo Park CA 94025, USA. The link to the privacy policy of Instagram can be found here: https://instagram.com/about/legal/privacy

d. Youtube videos
On some of our websites, we embed Youtube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When a Youtube video is started, the provider uses cookies that collect information about user behavior. The link to the privacy policy of Google can be found here: https://www.google.com/intl/de/policies/privacy

6. Mouseflow

This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (only with anonymized IP address).

This creates a log of mouse movements and clicks with the intention of randomly replaying individual website visits and deriving potential improvements for the website from this. The information is not personal and is not passed on.

If you do not wish for a recording, you can deactivate it on all websites that use Mouseflow under the following link: www.mouseflow.de/opt-out/.

7. Integration of the Trusted Shops Trustbadge

To display our Trusted Shops seal of approval and any collected reviews, as well as to offer Trusted Shops products for buyers after an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to protect our overriding legitimate interests in an optimal marketing of our offer as part of a balancing of interests according to Art. 6 Para. 1 Sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When calling up the Trustbadge, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, amount of data transferred, and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your site visit.

Further personal data is only transmitted to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order, or have already registered for use. In this case, the contractual agreement made between you and Trusted Shops applies.

8. Transfer of data

A transfer of your personal data to third parties for purposes other than those listed below does not take place. We only pass on your personal data to third parties if:

• you have given your express consent according to Art. 6 Para. 1 Sentence 1 lit. a GDPR,

• the transfer according to Art. 6 Para. 1 Sentence 1 lit. f GDPR is necessary for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,

• in the event that there is a legal obligation for the transfer according to Art. 6 Para. 1 Sentence 1 lit. c GDPR as well as

• this is legally permissible and according to Art. 6 Para. 1 Sentence 1 lit. b GDPR necessary for the processing of contractual relationships with you.

A transfer of your data occurs, for example, to the shipping company commissioned with the delivery, as far as this is necessary for the delivery of the goods. For the processing of payments, we pass on your payment details to the credit institution commissioned with the payment. The legal basis for data processing in these cases is the performance of contractual measures according to Art. 6 Para. 1 Sentence 1 lit. b GDPR.

10. Rights of the data subject

You have the right:

• according to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• according to Art. 16 GDPR to demand the immediate correction of incorrect or completion of your personal data stored by us;
• according to Art. 17 GDPR to demand the deletion of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
• according to Art. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is contested by you, the processing is unlawful but you oppose its deletion and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims or you have objected to processing according to Art. 21 GDPR;
• according to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transmission to another controller;
• according to Art. 7 Para. 3 GDPR to withdraw your once given consent to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future and
• according to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this.

11. Right to object

If your personal data is processed based on legitimate interests according to Art. 6 Para. 1 Sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, as far as there are reasons for this that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without stating a particular situation. If you would like to exercise your right of withdrawal or objection, a message in text form (e.g., email, fax, letter) to the contact details of the controller mentioned in Section 1 is sufficient.

12. Topicality and amendment of this privacy policy

This privacy policy is currently valid and is as of May 2018. Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to amend this privacy policy. The currently valid privacy policy can be accessed and printed out by you at any time on the website at https://capuniverse.com/de/datenschutz/.