1. Name and contact details of the controller

We at TheVap GmbH take the protection of your personal data seriously and would like to inform you about personal data of you that may be processed during your visit of our website.

The controller for the processing of your personal data within the meaning of Art. 4 No. 7 General Data Protection Regulation (DSGVO) is:

TheVap GmbH
Contact person for data protection: Tobias Heinzl
Address: Brandstett 1, 83561 Ramerberg, Germany
Email: hello@thevap-vapor.com
Phone: +49 (0)8039 827 8960

Please refer to our imprint for further information about TheVap GmbH.

2. Processed personal data

During the informational use of the websites, the following categories of personal data are collected, stored and processed by us:

"log data": When you visit our website, a log data record (server log files) is stored temporarily and anonymously on our web server. This consists of the following data:

• the page from which our website was requested (so-called referrer URL)
• the name and URL of the requested page
• the date and time of the request
• the description of the type, language and version of the web browser used
• the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established
• the amount of data transferred
• the operating system
• the message whether the request was successful (access status/http status code)
• the GMT time zone difference

"contact data": When you send us an email, the personal data included in your email and therefore transmitted to us are processed (e.g. your email address and the time of transmission, your first name and surname, gender, company, address, phone number, fax number).

3. Purpose and legal basis of data processing

We process the personal data described in more detail above in accordance with the provisions of the General Data Protection Regulation (GDPR), other relevant data protection regulations and only to the extent necessary.

The processing of log data serves statistical purposes and to improve the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6 (1) p. 1 lit. f GDPR).

Contact data is processed for the purpose of handling user and customer inquiries and to be able to correspond with you (legal basis is Art. 6 (1) p. 1 lit. b or lit. f GDPR).

Insofar as the processing of personal data is based on Art. 6 (1) p. 1 lit. f GDPR, the aforementioned purposes also represent our legitimate interests.

4. Duration of data storage

As far as no explicit max. storage period is specified hereafter, your data will only be processed and stored for as long as is necessary to achieve the above-mentioned processing purposes; the legal bases specified in the context of the processing purposes apply accordingly. The personal data collected by us will be kept until the expiry of the statutory retention obligation of 6 years and then deleted, unless we are obliged to store it for a longer period of time due to tax and commercial requirements on storage and documentation (German Commercial Code (HGB), German Penal Code (StGB) or Taxation Regulation (AO)) in accordance with Art. 6 (1) p. 1 lit. c GDPR or you have consented for us to store them for a longer period of time in accordance with Art. 6 (1) p. 1 lit. a GDPR.

5. Transfer of personal data to third parties

The following categories of recipients, which are usually data processors, may receive access to your personal data:

• Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for domain hosting, data center services, IT security). The legal basis for the transfer is then Art. 6 (1) p. 1 lit. b or lit. f GDPR, insofar as these service providers are not data processors;
• Government agencies/authorities, insofar as this is necessary for the fulfillment of a legal obligation. The legal basis for the transfer is then Art. 6 (1) p. 1 lit. c GDPR;
• Persons employed to carry out our business operations including billing of goods and services (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The legal basis for the disclosure is Art. 6 (1) p. 1 lit. b or lit. f GDPR.

In addition, we will only share your personal data with third parties if you have given your express consent to do so in accordance with Art. 6 (1) p. 1 lit. a GDPR.

6. Affected rights

You have the right:

• to withdraw your consent to our data processing at any time in accordance with Art. 7 (3) GDPR. As a consequence, we will not be allowed to continue processing the personal data based on this request;
• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purpose of the processing, the category of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the right to rectification, erasure, restriction of processing or objection to it, the existence of a right to lodge a complaint, the source of your data (if it was not collected by us), as well as about the existence of automated decision-making including profiling and, where appropriate, meaningful information about its particulars;
• to demand the immediate rectification of inaccurate data or to have incomplete personal data stored by us completed in accordance with Art. 16 GDPR;
• to demand the erasure of your personal data stored with us, as long as the processing is not required for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims in accordance with Art. 17 GDPR;
• to demand the processing of your personal data to be restricted in accordance with Art. 18 GDPR if the accuracy of the data is contested by you, the processing is unlawful, whereby you oppose to its erasure and we no longer need the data, but you require it to establish, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• to receive your personal data provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller in accordance with Art. 20 GDPR and
• to complain to a supervisory authority in accordance with Art. 77 GDPR. In general, you can contact the supervisory authority of your usual place of residence/work or our place of business. The supervisory authority at our place of business is:
  Der Bayerische Landesbeauftragte für den Datenschutz (BayLfD)
  Prof. Dr. Thomas Petri
  Address: Wagmuellerstrasse 18, 80538 Munich, Germany
  Phone: +49 (0)89 212672-0
  Fax: +49 (0)89 212672-50
  Email: poststelle@datenschutz-bayern.de
  

7. Right to object

As long as your personal data is processed in accordance with Art. 6 (1) p. 1 lit. f GDPR on the basis of legitimate interests, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided there are compelling legitimate grounds relating to your particular situation.

If you would like to exercise your right to object, please send an e-mail to hello@thevap-vapor.com