Protecting your personal data is very important to us. We want to inform you about which personal data is collected, how it is used, and what options you have when navigating our websites.
Privacy Policy
1. NOTE ON THE RESPONSIBLE BODY
The responsible body for data processing is:
Elephant Bay GmbH
Birkenwaldstr. 214
70191 Stuttgart
Germany
Telephone: 0711 217 268 60
Fax: 0711 217 268 69
Email: info@elephant-bay.com
Managing Partner: Leonidas Kalaitsidis
Managing Director: Nicole Rezgui
2. GENERAL PRIVACY POLICY
By using the website, you consent to the collection, processing, and use of data as described below. Our website can generally be visited without registration. During your visit, data such as the pages accessed or the name of the file accessed, the date, and the time of day are stored on the server for statistical purposes without being directly related to you. Personal data, in particular name, address, or email address, is collected voluntarily. The data will not be passed on to third parties without your consent.
HANDLING OF PERSONAL DATA
Personal data is information that can be used to identify an individual, i.e., information that can be traced back to an individual. This includes a name, email address, or telephone number. Data about preferences, hobbies, memberships, or which websites someone has visited also counts as personal data.
Personal data will only be collected, used and shared if this is permitted by law or if the users consent to the data collection.
SCOPE
This privacy policy informs users about the nature, scope and purpose of the collection and use of personal data by the responsible provider.
The legal basis for data protection can be found in the General Data Protection Regulation (GDPR).
POSSIBILITIES FOR CONTACTING US
The website contains a contact form that can be used to contact us electronically. Alternatively, you can contact us via the email address provided. If you contact us via one of these channels, the personal data you submit will be automatically saved. This storage serves solely for the purposes of processing your request or contacting the data subject. The data will not be shared with third parties.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular, retention periods—remain unaffected.
CREATION OF LOG FILES
Every time you visit our website, we collect data and information using an automated system. This data is stored in the server's log files.
The following data may be collected:
- Browser type and version
- operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
The data is processed to deliver the content of our website, to ensure the functionality of our information technology systems, and to optimize our website. Log file data is always stored separately from other personal user data.
COLLECTION, PROCESSING AND USE OF PERSONAL DATA FOR ORDERS
When you place an order, we only collect and use your personal data to the extent necessary to fulfill and process your order and to process your inquiries. Providing this data is required to conclude the contract. Failure to provide this data will result in no contract being concluded. Processing is necessary to fulfill a contract with you. Your data will not be passed on to third parties without your express consent. The only exceptions to this are our service partners, whom we need to process the contractual relationship, or service providers we use for order processing. In addition to the recipients named in the respective clauses of this data protection declaration, these include recipients from the following categories: shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping retailers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to a minimum.
COOKIES
Our website uses cookies. These are small text files that make it possible to store specific, user-related information on the user's device while they use the website. Cookies make it possible, in particular, to determine the frequency and number of pages visited, to analyze site usage behavior, and also to make our offering more customer-friendly. Cookies remain stored beyond the end of a browser session and can be accessed again upon subsequent visits to the site. If you do not wish this, you should set your internet browser to refuse cookies.
NEWSLETTER
If you subscribe to our company's newsletter, the data in the respective input mask will be transmitted to the person responsible for processing.
When registering for the newsletter, the user's IP address and the date and time of registration are saved. This serves to prevent misuse of the services or the email address of the data subject. Data will not be shared with third parties. An exception applies if there is a legal obligation to share data.
The data will be used exclusively for sending the newsletter. The data subject can cancel the newsletter subscription at any time. Likewise, consent to the storage of personal data can be revoked at any time. A corresponding link for this purpose is included in every newsletter.
You can revoke your consent to the storage of your data, your email address, and their use for sending the newsletter at any time, for example, via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
ROUTINE DELETION AND BLOCKING OF PERSONAL DATA
We process and store the personal data of the data subject only for as long as necessary to achieve the purpose of storage. Storage may also occur beyond this period if this is provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject.
As soon as the purpose of storage no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted.
DURATION OF STORAGE OF PERSONAL DATA
Personal data will be stored for the duration of the respective statutory retention period. After this period, the data will be routinely deleted unless necessary for the initiation or fulfillment of a contract.
LEGAL BASIS FOR PROCESSING
If we obtain the consent of the data subject for processing personal data, Article 6 paragraph 1 letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations necessary to implement pre-contractual measures.
To the extent that processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 paragraph 1 letter c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
If processing is necessary to protect the legitimate interests of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the legitimate interest, Article 6 (1) (f) GDPR serves as the legal basis for processing. Our company's legitimate interest lies in conducting our business activities.
RIGHTS OF THE DATA SUBJECT
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
RIGHT TO INFORMATION
You can request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing occurs, you can request the following information from the controller:
(a) the purposes for which the personal data are processed;
(b) the categories of personal data being processed;
(c) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(d) the planned duration for which the personal data concerning you will be stored or, where specific information is not possible, the criteria used to determine that duration;
(e) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(f) the existence of a right to lodge a complaint with a supervisory authority;
(g) where the personal data are not collected from the data subject, all available information as to their source;
You have the right to request information about whether your personal data will be transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.
RIGHT TO RECTIFICATION
You have the right to request rectification and/or completion from the controller if the personal data concerning you that are processed are incorrect or incomplete. The controller must carry out the rectification immediately.
RIGHT TO RESTRICTION OF PROCESSING
You may request the restriction of the processing of your personal data under the following conditions:
a) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but you need them to assert, exercise or defend legal claims, or
d) if you have objected to processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.
If the processing of personal data concerning you has been restricted, these data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.
RIGHT TO ERASURE
You may request the controller to delete your personal data immediately, and the controller is obliged to delete this data immediately if one of the following reasons applies:
a) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
b) You withdraw your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
c) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
d) The personal data concerning you were processed unlawfully.
e) The erasure of personal data concerning you is necessary to fulfil a legal obligation under Union or Member State law to which the controller is subject.
The right to erasure does not apply if processing is necessary
(a) to exercise the right to freedom of expression and information;
(b) for compliance with a legal obligation required by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR;
d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in paragraph 1 is likely to make the achievement of the objectives of that processing impossible or seriously compromises it, or
e) to assert, exercise or defend legal claims.
RIGHT TO INFORMATION
If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or restriction of processing, unless doing so proves impossible or involves disproportionate effort.
You have the right to be informed by the controller about these recipients.
RIGHT TO DATA PORTABILITY
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. Furthermore, you have the right to transmit these data to another controller without hindrance from the controller to whom the personal data was provided, provided that
a) the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
b) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the freedoms and rights of others.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
RIGHT OF OBJECTION
You have the right to object at any time to the processing of personal data concerning you which is based on Article 6 (1) (e) or (f) GDPR, for reasons arising from your particular situation.
The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
RIGHT TO REVOKE THE DATA PROTECTION CONSENT DECLARATION
You have the right to revoke your consent to data protection at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.
RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.
The responsible supervisory authority for data protection issues is the State Data Protection Commissioner of the federal state in which our company is headquartered:
The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Telephone: 0711 61 55 41-0
Fax: 0711 61 55 41-15