Privacy Policy
The controller for the data processing is:
Stern Didactic GmbH
Nicolai Stern
Hafenstraße 25
68159 Mannheim
info@sterndidactic.com
Phone: + 49 621 43 03 10 05
We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.
1. Access data and hosting
You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically saves only a so-called server log file containing, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data), and documents the request. This access data is evaluated solely for the purpose of ensuring trouble-free operation of the site and improving our offering. This serves to safeguard our overriding legitimate interests in a correct presentation of our offering pursuant to Art. 6(1)(1)(f) GDPR. All access data is deleted no later than seven days after the end of your visit to the site.
1.1 Hosting
The services for hosting and presenting the website are partly provided by our service providers in the context of processing on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected in forms provided for that purpose on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact options described in this Privacy Policy. Our service providers are located in the USA. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the European Commission's standard data protection clauses.
1.2 Content Delivery Network
For the purpose of shorter loading times, we use a so-called Content Delivery Network ("CDN") for some offerings. With this service, content, e.g. large media files, is delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of the service providers. Our service providers are active for us within the framework of order processing. If you have questions about our service providers and the basis of our cooperation with you, please contact us using the contact options described in this Privacy Policy. Our service providers are located in the USA. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the European Commission's standard data protection clauses.
2. Data processing for contract fulfillment and contact
We collect personal data when you provide it to us voluntarily as part of your order or when contacting us (e.g. via the contact form or email). Mandatory fields are marked as such because in these cases we absolutely need the data to fulfill the contract or to process your contact, and you cannot complete the order or send the contact without providing it. Which data is collected can be seen from the respective input forms.
We use the data you provide to fulfill the contract and process your inquiries pursuant to Art. 6(1)(1)(b) GDPR. Further information on the processing of your data, in particular on its disclosure to our service providers for the purpose of order, payment, and shipping processing, can be found in the following sections of this Privacy Policy. After complete fulfillment of the contract, your data will be restricted from further processing and deleted after expiry of any tax and commercial law retention periods pursuant to Art. 6(1)(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(1)(a) GDPR or we reserve the right to use the data beyond this where legally permitted, of which we inform you in this declaration.
ERP system
We use ERP systems from external service providers for order and contract processing. Our service providers are active for us within the framework of order processing. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact options described in this Privacy Policy.
3. Data processing for the purpose of shipping
For the fulfillment of the contract pursuant to Art. 6(1)(1)(b) GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
Disclosure of data to shipping service providers for the purpose of shipping notification
If you have given us your express consent during or after your order, we will pass on your email address to the selected shipping service provider, on the basis of your consent pursuant to Art. 6(1)(1)(a) GDPR, so that they may contact you before delivery for the purpose of delivery announcement or coordination.
The consent can be revoked at any time by sending a message to the contact option described in this Privacy Policy or directly to the shipping service provider at the contact address listed below. After revocation, we delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this where legally permitted, of which we inform you in this declaration.
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
4. Data processing for payment processing
When processing payments in our online shop, we work with the following partners: technical service providers, banks, payment service providers.
4.1 Data processing for transaction processing
Depending on the payment method selected, we pass on the data necessary for processing the payment transaction to our technical service providers, who act for us within the framework of order processing, or to the commissioned banks or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves to fulfill the contract pursuant to Art. 6(1)(1)(b) GDPR. In some cases, the payment service providers themselves collect the data required for processing the payment, e.g. on their own website or via a technical integration in the order process. The privacy policy of the respective payment service provider applies in this regard.
If you have questions about our partners for payment processing and the basis of our cooperation with them, please contact us using the contact options described in this Privacy Policy.
4.2 Data processing for the purpose of fraud prevention and the optimization of our payment processes
Where applicable, we pass on additional data to our service providers, which they use together with the data necessary for processing the payment as our processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, processing of disputed payments, accounting support). Pursuant to Art. 6(1)(1)(f) GDPR, this serves to safeguard our overriding legitimate interests in protecting ourselves against fraud and in efficient payment management.
5. Advertising by email, post
5.1 Email newsletter with subscription
If you subscribe to our newsletter, we use the data required for this or separately provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6(1)(1)(a) GDPR.
You may unsubscribe from the newsletter at any time, either by sending a message to the contact option described in this Privacy Policy or via a link provided for this purpose in the newsletter.
After unsubscribing, we delete your email address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this where legally permitted, of which we inform you in this declaration.
5.2 Newsletter dispatch
The newsletter may also be sent by our service providers within the framework of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact options described in this Privacy Policy.
5.3 Sending review requests by email
If you have given us your express consent during or after your order pursuant to Art. 6(1)(1)(a) GDPR, we use your email address to ask you for a review of your order via the review system we use. This consent can be revoked at any time by sending a message to the contact option described in this Privacy Policy or via a link provided for this purpose in the review request.
The review requests may also be sent by our service providers within the framework of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact options described in this Privacy Policy.
5.4 Postal advertising and your right to object
In addition, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by letter post. This serves to safeguard our overriding legitimate interests in advertising to our customers pursuant to Art. 6(1)(1)(f) GDPR. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact options described in this Privacy Policy.
The advertising mailings are carried out within the framework of processing on our behalf by a service provider to whom we pass on your data for this purpose.
6. Cookies and other technologies
6.1 General information
To make visits to our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies).
We use such technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). Through these technologies, the IP address, time of visit, device and browser information, as well as information about your use of our website (e.g. information about the contents of the shopping cart) are collected and processed. This serves to safeguard our overriding legitimate interests in an optimized presentation of our offering pursuant to Art. 6(1)(1)(f) GDPR.
In addition, we use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to provide proof of consents to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for the data processing, can be found in the following sections of this Privacy Policy.
You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
Insofar as you have consented to the use of the technologies pursuant to Art. 6(1)(1)(a) GDPR, you can revoke your consent at any time by sending a message to the contact option described in the Privacy Policy. Alternatively, you can also use the following link: https://www.sterndidactic.com/cookie-einstellungen/. If cookies are not accepted, the functionality of our website may be limited.
7. Use of cookies and other technologies for web analytics and advertising purposes
If you have given your consent pursuant to Art. 6(1)(1)(a) GDPR, we use the following cookies and other technologies of third-party providers on our website. After the purpose has ceased and the use of the respective technology by us has ended, the data collected in this context is deleted. You can revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the section "Cookies and other technologies". Further information, including the basis of our cooperation with the individual providers, can be found with the individual technologies. If you have questions about the providers and the basis of our cooperation with them, please contact us using the contact options described in this Privacy Policy.
Use of Google services
We use the following technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the European Commission's standard data protection clauses. If your IP address is collected via the Google technologies, it is shortened by activating IP anonymization before being stored on Google's servers. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Unless otherwise stated for the individual technologies, the data processing takes place on the basis of an agreement between joint controllers concluded for the respective technology pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy notices.
Google Analytics
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website) from which user profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not merged with other Google data. The data processing takes place on the basis of an agreement on order processing by Google.
Google Maps
For the visual presentation of geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits them to Google, and then processes them. We have no influence on this subsequent data processing.
8. Social Media
Our online presence on Facebook, Instagram, YouTube, LinkedIn, Xing
Insofar as you have given your consent pursuant to Art. 6(1)(1)(a) GDPR to the respective social media operator, when you visit our online presences on the social media listed above, your data is automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These can be used, for example, to display advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of the data by the respective social media operator, as well as for a contact option and your rights and setting options to protect your privacy, please refer to the providers' privacy notices linked below. If you nevertheless need help in this regard, you can contact us.
Facebook is an offering of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the European Commission's standard data protection clauses. The data processing in the context of visiting a Facebook fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on insights data) can be found here.
Instagram is an offering of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the European Commission's standard data protection clauses. The data processing in the context of visiting an Instagram fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on insights data) can be found here.
YouTube is an offering of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the European Commission's standard data protection clauses.
LinkedIn is an offering of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information automatically collected by LinkedIn about your use of our online presence on LinkedIn is generally transmitted to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the European Commission's standard data protection clauses.
Xing is an offering of New Work SE, Dammtorstraße 30, 20354 Hamburg.
9. Contact options and your rights
As a data subject, you have the following rights:
-
pursuant to Art. 15 GDPR the right to request information about your personal data processed by us to the extent specified there;
-
pursuant to Art. 16 GDPR the right to request the immediate correction of incorrect or completion of your personal data stored by us;
-
pursuant to Art. 17 GDPR the right to request the deletion of your personal data stored by us, unless further processing is required
-
to exercise the right to freedom of expression and information;
-
to fulfill a legal obligation;
-
for reasons of public interest; or
-
to assert, exercise, or defend legal claims;
-
-
pursuant to Art. 18 GDPR the right to request the restriction of the processing of your personal data, insofar as
-
the accuracy of the data is disputed by you;
-
the processing is unlawful, but you refuse its deletion;
-
we no longer need the data, but you need it to assert, exercise, or defend legal claims; or
-
you have lodged an objection against the processing pursuant to Art. 21 GDPR;
-
-
pursuant to Art. 20 GDPR the right to receive your personal data that you have provided to us in a structured, common, and machine-readable format or to request its transfer to another controller;
-
pursuant to Art. 77 GDPR the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
For questions on the collection, processing, or use of your personal data, on information, correction, restriction, or deletion of data, as well as revocation of consents granted or objection to a particular use of data, please contact us directly using the contact details in our imprint.
Right to object
Insofar as we process personal data as explained above to safeguard our overriding legitimate interests, you can object to this processing with effect for the future. If the processing is for purposes of direct marketing, you can exercise this right at any time as described above. If the processing is for other purposes, you only have a right to object on grounds arising from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
This does not apply if the processing is for purposes of direct marketing. Then we will no longer process your personal data for this purpose.