The security of personal data such as name, address, telephone number or email, is a serious and important concern for our company. Therefore, we conduct our online activities in compliance with the respective statutory provisions relating to data protection and data security. Below, you can find the information we process.
Personal data / types of use
As a principle, the protection of your personal data is of highest priority for us. You decide whether or not you wish to make such data known to us, for example in the course of any registration, survey or similar. Such information on your part is relevant for your enquiry, but you provide it on a voluntary basis. An exception to this rule is when prior consent cannot be obtained for practical reasons and the processing of data is permitted by law.
Legal basis for the processing of personal data
If we obtain the consent of the data subject to process their personal data, Article 6(1)(a) GDPR serves as the legal basis for the processing of personal data.
When processing personal data necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR shall serve as the legal basis. This also applies to any processing required to perform pre-contractual measures.
If processing of personal data is necessary for compliance with a legal obligation to which we are subject, Article 6(1)(c) GDPR shall serve as the legal basis.
In the event that the vital interests of the data subject or of another natural person necessitate the processing of personal data, Article 6 (1)(d) GDPR shall serve as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR shall serve as the legal basis for processing.
Data deletion and storage duration
The data subject’s personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this if provisions have been made for this by the European or national legislator in Union regulations, laws or other rules to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the standards mentioned above expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Exchange of data / contractual relationships with partners / third parties
In addition to the types of use described above, we will transfer your data to third parties that are involved in the processing of your order or that participate in contracts. For example, if you place an order via our website, we will transmit your order information to our partner companies and contractors who process and deliver your order to you. Data will only be transmitted to the extent required in order to fulfil or deliver your order or to process an enquiry. We will also transmit personal data to third parties where we are required to do so by law.
Data automatically collected on our website / usage data
We welcome anybody to visit and use our website free of charge and to look at the products on offer. When you visit our website, we record the following general usage data in order to assess which parts of our website you visit and how long you stay there:
- Information about the browser type, version and language used
- The user’s operating system
- The user’s IP address
- Date and time of access, time zone difference from Greenwich Mean Time (GMT)
- Websites from which the user’ system reaches our website
- The services and functions used on our website
- Access status / HTTP status code
- Location (country and town/city), using the IP address
Such data will be combined with the usage data of all visitors to our website in order to measure the number of visitors, the average time of the visits, pages visited, etc. The data we collect is combined and used for internal purposes only.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
We use this combined data for evaluating our products, services and the news we make available via our website, as well as for monitoring use of our website and generally improving its content.
The temporary storage of IP addresses by the system is required in order to allow the website to be delivered to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. These purposes are also the basis for our legitimate interests in data processing pursuant to Article 6(1)(f) GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. If data is stored in log files, this is the case after no more than seven days. Further storage is possible. In this case, the users’ IP addresses are deleted or distorted, so that it is no longer possible to associate them with the calling client.
The collection of data in order to provide the website and the storage of the data in log files is essential for the operation of the website. Therefore the user cannot opt out.
Third party advertisements. Embedded videos or links to other websites displayed on our website may collect user data if you click on them or otherwise follow their instructions. We have no control over the data collected either voluntarily or involuntarily via advertisements or websites of third parties. We recommend that you read the privacy policies of the promoted websites if you have any concerns regarding the collection and use of your data.
Like many other commercial websites, we use the technology known as “cookies” to collect information on how you use the website, and to ensure your visit runs smoothly.
Cookies are text files that are stored in the Internet browser or come from the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string that allows the browser to be uniquely identified when the website is visited again.
Our cookies neither disclose nor contain any personal data. Only after login is the user name retained for identification. Cookies cannot read any information from your computer or interact with other cookies on your hard disk. However, cookies enable us to recognize you when you revisit our website.
The following data is stored in the cookies:
- Language settings
- User name and login status
- Hash to identify the shopping cart
- IDs of products recently displayed
The legal basis for processing personal data using cookies required for technical and analytical purposes is Article 6(1)(f) GDPR.
We require cookies for the following:
- Language settings
- Logged in or logged out
- Shopping basket
- Display of recently accessed products
The user data collected through technically necessary cookies is not used to create user profiles.
Analysis cookies are used for the purpose of improving the quality of our website and its contents. Analysis cookies allow us to ascertain how the website is used and thus constantly optimise our service.
These purposes are also the basis for our legitimate interests in processing personal data pursuant to Article 6(1)(f) GDPR.
If you do not want your browser to accept cookies, you can also deactivate or restrict cookies. Cookies that have already been saved can be deleted or deactivated at any time in your web browser. Deactivation of cookies may prevent this website from functioning properly. You may not be able to access all the options and information on this website. Please remember that cookies must be deactivated separately in each of the browsers you use.
For more information about how to manage or delete cookies using the settings in your browser, please visit the help page for that browser.
Registration and ordering
On our website, we offer users the opportunity to register by providing their email address and a password. The data is entered into an input screen and sent to us and stored in encrypted form. Data is not transferred to third parties. The following personal data is also collected as part of the order process:
- First name and surname
- Address and country
- Email address
- Company (optional)
- Telephone number
As part of the registration and ordering process, consent is obtained from the user to process this data. Once the order has been submitted the data is added to the user’s registration details to prevent the user having to enter the information again when placing further orders.
The legal basis for processing data if the user’s consent is given is Article 6(1)(a) GDPR.
If the registration serves to fulfil a contract to which the user is party or to perform pre-contractual measures, the additional legal basis for the processing of data is Article 6(1)(b) GDPR.
User registration is necessary in order to provide certain content and services on our website.
User registration is necessary in order to fulfil a contract with the user or to perform pre-contractual measures.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection.
This is the case for data collected during the registration process if the registration for our website is cancelled or modified.
This is the case for data collected during the registration process for the purpose of fulfilling a contract or performing pre-contractual measures if the data is no longer necessary for the performance of the contract. Even after the conclusion of the contract, there may be a need to store the contracting party’s personal data in order to comply with contractual or legal obligations.
As a user, you have the option to cancel your registration at any time. The data stored about you can be modified at any time via customer support or the customer centre.
If the data is necessary for the fulfilment of a contract or for performing pre-contractual measures, premature deletion of the data is only possible if contractual or legal obligations do not preclude deletion.
Contact form and email contact
We provide a contact form on our website that you can use to get in touch with us electronically and let us know what we can help you with. If a user takes advantage of one of these options, the data entered on the input screen will be transmitted to us and stored. This data includes:
- First name and surname
- Subject & your message
- Email address
- Telephone number
- Company (optional)
Alternatively, you can contact us via the email addresses provided on our website. In this case, the user’s personal data transmitted by email will be stored.
No data is passed on to third parties in this context. The data is used exclusively for processing the conversation.
The legal basis for processing the data transmitted via the contact form or in the course of sending an email is Article 6(1)(f) GDPR. If the purpose of the contact is to conclude a contract, the additional legal basis for the processing shall be Article 6(1)(b) GDPR.
The personal data from the input screen is only processed in order for us to process the contact. In the event of contact via email, this is also the basis for the required legitimate interest in the processing of data.
Any other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the contact form input screen and the data sent by email, this is the case if the respective conversation with the user has ended. The conversation is deemed to be ended if it can be inferred from the circumstances that the relevant facts have been conclusively clarified.
Use of services for marketing and analysis purposes
Our website utilises Google Analytics, a web analytics tool by Google Inc. (“Google”). Google Analytics uses “cookies”, text files stored on your computer that enable analysis of how you use the website. The cookie-generated information about your use of this website is usually transmitted to and stored on a Google server in the United States. However, if you are in a country that is a member state of the European Union or a contracting party to the Agreement on the European Economic Area, and if IP address anonymization has been activated on this website, Google will first truncate your IP address. Only by way of exception will the full IP address be transmitted to a Google server in the United States and truncated there. Google will use this information on our behalf for the purposes of analysing how you use the website, compiling reports on website activity and providing further services related to website and internet use to the website operator. Google will not combine the IP address transmitted by your browser via Google Analytics with other Google data. You can disable cookies by setting your browser accordingly; however, if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent collection and transfer of the data generated by cookies on www.megacase.com and relating to your use of the website (including your IP address) to Google, as well as the processing of such data by Google, by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout/eula.html?hl=en.
As an alternative to installing the browser plug-in, particularly in internet browsers on mobile devices, you can prevent the collection of data by Google Analytics by clicking this link:
This will save an “opt-out” cookie to your device, meaning that none of your data will be collected on this website by Google Analytics.
Please note that if you delete cookies in your browser settings, this may mean the Google Analytics opt-out cookie is also deleted and may have to be re-activated by you.
Google AdWords Conversion Tracking
Our website utilises the Google AdWords Conversion Tracking function. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). If you click on an AdWords advertisement placed by Google, a “conversion tracking cookie” will be stored on your computer. This cookie is valid for 30 days and does not contain data that would allow us to identify you personally.
Conversion tracking allows us and Google to identify which AdWords advertisements you have clicked on and whether you were forwarded to our website via an advertisement, if you visit our website and the cookie is still valid. Google provides us with our own cookie, which is different from the cookies of other customers of this Google service, so that we can only implement a reach assessment with regard to our own cookies, and not across all websites of customers of the Google AdWords service. The cookie enables us to compile our own conversion statistics on customers that visit our website through AdWords advertisements.
To object to your participation in Google AdWords conversion tracking, you must deactivate the storage of Google tracking cookies by setting your browser accordingly. You will then not be included in our conversion tracking statistics.
The aforementioned Google services are used for advertising and marketing purposes with the aim of making our offering more attractive. As described above for each of the individual services, we take your right to privacy seriously by allowing you to object to all services and informing you in advance about this Privacy Notice. The legal basis for the aforementioned data processing is Article 6(1)(f) GDPR.
Embedding and use of links to social media (Facebook)
Links to the external social network service Facebook are embedded on our website, in particular in the areas displaying our products. The responsibility for the internet services of this social network service lies solely with its operators. You will find further information below.
Your data is transferred to Facebook as a result of our links. These are normal hyperlinks, through which no regular data transmission takes place. If you click on the link, you will be taken directly to our Facebook page. Data is only transmitted if you are logged into your Facebook user account. You can then link content from our websites directly with Facebook. Under certain circumstances, Facebook may thus ascertain which content you have viewed on our website.
The sole responsibility for Facebook and its website lies with Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;
For further information regarding the purpose and scope of data collection, and regarding the further processing and use of your data by Facebook, see Facebook’s own privacy rules. These are available online at https://www.facebook.com/about/privacy/.
Under the above-mentioned link you will also find information regarding settings for the protection of your privacy and regarding your further rights concerning the processing of your data by the social network service.
We take precautions to ensure the security of your personal data. Your data will be diligently protected against loss, destruction, manipulation and unauthorised access or unauthorised disclosure and transmission.
We protect collected customer data by saving it on servers secured by passwords and “firewalls” that use encryption technology to prevent unauthorised access.
We implement state-of-the-art technology and do our utmost to provide you with a secure environment for the completion of your order; however, we cannot guarantee absolute security of your data.
We ask you to take every available precaution to protect your personal data when online. We encourage you to at least change your passwords on a regular basis, to use a combination of letters and numbers, and to ensure you use a secure browser when surfing the internet.
In order to protect input forms on our website, we use “reCAPTCHA”. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google”. Using this service allows us to determine whether the input has been made by a human or is an improper entry made by automaton.
To our knowledge, the referrer URL, the IP address, the behaviour of the visitor to the website, information about the operating system, browser and visiting time, cookies, display instructions and scripts, the user’s input pattern and mouse movements around the “reCAPTCHA” checkbox are transmitted to Google. The IP address transmitted through “reCAPTCHA” will not be associated with any other data held by Google unless you are logged into your Google account when you use the “reCAPTCHA” plug-in. If you wish to prevent such transmission and storage of data about you and your behaviour on our website by “Google”, you must log out of “Google” before visiting our website or using the reCAPTCHA plug-in.
The legal basis for the data processing is Article 6(1)(f) GDPR. Safeguarding our website against misuse and spam using “reCAPTCHA” represents a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Rights as a data subject
If your personal data is processed, you are a data subject as defined in the GDPR and you have the following rights with regard to the controller:
1. Information, rectification, restriction and deletion
You have the right to access the data stored about you and information concerning its origin and recipient and the purpose of data processing by our website free of charge at any time. In addition, you have the right to rectify, delete or restrict the processing of your personal data, provided the legal requirements to do so are met.
Details can be found in the relevant statutory provisions, Article 15 to 19 GDPR.
2. Right to data portability
You have the right to receive the personal data concerning you that you have provided to us as the controller, in a structured, commonly used and machine-readable format. We can comply with this right by providing an HTML export in compressed form (zip) of the customer data processed about you.
3. Right to information
If you have exercised your right of rectification, deletion or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or deletion of data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed about these recipients by the controller.
4. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you that is based upon point (e) or (f) of Article 6(1) GDPR, including profiling based upon those provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
5. Revocability of declarations of consent under data protection law
You may also revoke your consent with regard to us at any time with effect for the future using the contact details below.
6. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.
Responsible authority, contact person for queries or exercising your rights as a data subject, contact
The responsible authority within the meaning of the data protection regulations for all data processing through our website is:
Megacase GmbH, Am Wiesenweg 19-21, D-97262 Hausen
In the event of any questions, comments, complaints or to exercise your rights as a data subject in connection with our Privacy Notice and the processing of your personal data by our websites, you can contact our Data Protection Officer directly by email (firstname.lastname@example.org). He will gladly take care of your data protection concerns.