Skip to main content

Data protection declaration acc. GDPR

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.

Access data and responsible persons

Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Underwater No1
Tauchsport GmbH 
Grüner Brunnenweg 146 
50827 Cologne 
Germany 
Tel .: 0049 221/8882090
Email: info@underwater-no1.com
Website: www.u1tauchshop.de, www.underwater-no1.com
The person responsible for the processing of personal data is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data.
You can visit our website without providing any personal information. Each time a website is called up, the web server only automatically saves a so-called server log file, which e.g. contains the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.
This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. According to Art. 6 Para. 1 Clause 1 lit. f GDPR to protect our legitimate interests, which outweigh our interests, in the correct presentation of our offer. There is no other use of the data.

Data collection and use for contract processing and when opening a customer account

We collect personal data if you voluntarily provide it to us as part of your order, when contacting us (e.g. via the contact form or email) or when opening a customer account. The contact form shows which data is collected in the case of a contact form. This data is only stored for the purpose of answering your request for 30 days and deleted after your request has been completed. Mandatory fields are marked as such, because in these cases we need the data to process the contract, to process your contact or to open the customer account, and you cannot complete the order and / or open an account without providing it, or cannot send the contact . Which data is collected can be seen from the respective input forms. We use the data provided by you in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for contract processing and processing your inquiries. After completion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that is permitted by law and about which we inform you in this declaration. You can delete your customer account at any time and send a message to datenschutz@underwater-no1.com.

Data transfer

To fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we will forward the payment data collected for this to the credit institution commissioned with the payment and, if applicable, the payment service provider commissioned by us or the selected payment service provider to process payments. Some of the selected payment service providers also collect this data themselves, provided you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated on our website. When you visit our website, the browser used on your device automatically sends information to the idealo server. This information is temporarily stored in a server log file for 7 days. The following information is recorded without your intervention and stored until it is automatically deleted:
  • IP address of the requesting computer, 
  • Date and time of access, 
  • Name and URL of the file accessed, 
  • Website from which access is made (referrer URL), 
  • The browser used and, if applicable, the operating system of your computer as well as the name of your access provider. 
The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this, the IP address must remain stored for the duration of the session. The log files are saved to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR.

Data transfer to payment providers

Your data will only be passed on via secure SSL encryption to the payment provider you selected in the ordering process for the purpose of payment processing.

The transmission of your data to the payment providers is based on Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.


payment by credit card

If you make the payment by credit card, the payment is processed by the payment provider "PAYONE GmbH". The data required for this (card number, validity and check number) are encrypted and forwarded to the payment provider and are not visible to the website operator. PAYONE GmbH is certified according to the Industry Data Security Standard (PCI DSS) and is subject to the Safe Harbor Agreement. The payment provider may transfer, process and store personal data outside the EU, which is necessary to process the payment. PAYONE is solely responsible for the processing of this data.

PAYONE GmbH - Lyoner Straße 9 - 60528 Frankfurt / Main - Germany


Other payment methods via PAYONE GmbH

The payment method Giropay, Sofortüberweisung, purchase on account, Sepa direct debit, Paydirekt and credit card.

The data required for this are encrypted and forwarded to the payment provider and are not visible to the website operator. PAYONE GmbH is certified according to the Industry Data Security Standard (PCI DSS) and is subject to the Safe Harbor Agreement. The payment provider may transfer, process and store personal data outside the EU, which is necessary to process the payment. PAYONE is solely responsible for the processing of this data.

PAYONE GmbH - Lyoner Straße 9 - 60528 Frankfurt / Main - Germany


Payment via PayPal and PayPal Express

If you make the payment using PayPal and PayPal Express, the bank details you have deposited with PayPal will be used by PayPal for the payment. The website operator has no access to this data. PayPal (Europe) S.à r.l. et Cie, S.C.A. is subject to the Safe Harbor Agreement. The payment provider may transfer, process and store personal data outside the EU, which is necessary to process the payment. PayPal is solely responsible for the processing of this data.
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal 
L-2449 Luxembourg 
Luxembourg 
Details on payment with PayPal can be found in the terms and conditions and the data protection regulations of the payment provider at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Data transfer to shipping service providers

If you have given us your express consent for this during or after your order, we will give you this in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO your email address to the selected shipping service provider DHL so that they can contact you before delivery for the purpose of delivery notification or coordination.
The consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this declaration.
DHL Paket GmbH
Sträßchensweg 10 
53113 Bonn

Data deletion and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this is done by the European or national legislator in EU regulations, laws or blocking or deletion of the data even if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage The data for a contract or a contract fulfillment exist other regulations, to which the person responsible is subject.

Email Newsletter

E-mail advertising with registration for the newsletter
If you register for our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.  
You can unsubscribe from the newsletter at any time and either by sending a message to the contact option described below or by using the link provided in the newsletter. After unsubscribing, we will delete your email address, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is permitted by law and about which we inform you in this declaration.

Cookies

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. f GDPR. Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). The duration of the storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:
  • Internet Explorer ™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
  • Safari ™: https://support.apple.com/kb/ph21411?locale=de_DE
  • Chrome ™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
  • Firefox ™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
  • Opera ™: http://help.opera.com/Windows/10.20/de/cookies.html
If cookies are not accepted, the functionality of our website may be restricted.

Social media plug-ins

Use of social plugins from Facebook using the Shariff solution.  
Social buttons from social networks are used on our website.
This serves to protect our legitimate interests in an optimal marketing of our offer, which predominate in the context of a balance of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. In order to increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but only by using an HTML link on the page. This integration ensures that when you visit a page on our website that contains such buttons, no connection is yet established with the servers of the provider of the respective social network.  
Click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider on which you (e.g. after entering your login data) e.g. can press the Like or Share button.  
The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as a contact option and your rights and setting options to protect your privacy can be found in the provider's data protection information. http://www.facebook.com/policy.php

Use of Google Analytics / Adwords

We use Google Analytics to analyze website usage. The data obtained from this is used to optimize our website and advertising measures. Google Analytics is a web analytics service operated and provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, United States). Google processes the data on website use on our behalf and is contractually obliged to take measures to ensure the confidentiality of the processed data.
During your visit to the website, following data recorded:
  • Pages called
  • Orders including sales and ordered products
  • Your behavior on the pages (e.g. clicks, scrolling behavior and length of stay)
  • Your approximate location (country and city)
  • Your IP address (in abbreviated form so that no clear assignment is possible)
  • Technical information such as browser, internet provider, end device and screen resolution
  • Source of origin of your visit (i.e. via which website or via which advertising material you came to us)
This data is transferred to a Google server in the USA. Google observes the data protection provisions of the "EU-US Privacy Shield" agreement. Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognized on future website visits.
The recorded data is saved together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remain stored indefinitely in aggregate form.
If you do not agree to the collection, you can prevent this by installing the browser add-on to deactivate Google Analytics.

Use of Google remarketing

We also use Google's remarketing feature. This enables us to display personalized advertising for you on suitable advertising spaces on other websites, based on the interests you have shown on our website. For more information, please refer to Google's privacy policy. You can prevent interest-based advertising by installing this browser plug-in.

Use of YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (provider of YouTube), https://www.youtube.com/?gl=EN.
We embed videos from the YouTube platform on our website. For this purpose, the videos are loaded directly from the YouTube server. The YouTube server is automatically informed of your IP address and which of our pages you have visited. If you are logged into your YouTube account, Google allows you to assign your usage behavior directly to your personal profile.
Videos from YouTube are only shown with your express consent (opt-in). You can withdraw your consent at any time with future effect by clicking on the cookie banner. The legal basis for the use of YouTube is Art. 6 Abs. 1 S. 1 lit. a) GDPR.
Google LLC is certified under the Privacy Shield Agreement and thereby offers a legal guarantee to comply with European data protection law. The current certificate can be viewed here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
You can find more information on this in the terms of use and Google's data protection declaration.

12. Contact options and your rights

As a data subject, you have the following rights:  
according to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
According to Art. 16 GDPR, you have the right to immediately request the correction of incorrect or incomplete personal data stored by us;
According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing
  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation;
  • for reasons of public interest or
  • is necessary to assert, exercise or defend legal claims;
according to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, provided that
  • the accuracy of the data is contested by you;
  • the processing is unlawful, but you refuse to delete it;
  • we no longer need the data, but you need it to assert, exercise or defend legal claims or
  • You have objected to processing in accordance with Art. 21 GDPR;
According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible;  
according to Art. 77 GDPR the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.  
If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data as well as revocation of consent or objection to a specific use of data, please contact us directly using the contact details in our imprint or at datenschutz @ underwater -no1.com

Right to object

Insofar as we process personal data as explained above in order to safeguard our legitimate interests, which outweigh our interests, you can object to this processing with effect for the future. If the processing takes place for the purposes of direct marketing, you can exercise this right at any time as described above. If the processing takes place for other purposes, you have a right to object only if there are reasons that arise from your particular situation.  
After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing of the assertion, exercise or defense of Serves legal claims.  
This does not apply if the processing is done for the purposes of direct marketing. Then we will no longer process your personal data for this purpose.