Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ARS Auto-Radio-Shop GmbH & Co. KG, Lichtäcker Straße 12, 73770 Denkendorf, Germany, Tel.: 0040 (0) 711 41427077, Email: info@ars-stuttgart.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser's address bar.

2) Data Collection When Visiting Our Website

When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website visited
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (where applicable: in anonymized form)

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (so-called persistent cookies). When cookies are set, they collect and process certain user information to varying extents, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie. You can find the duration of the respective cookie storage periods in the overview of your web browser's cookie settings.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance of a contract, pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the website visit.

Please note that you can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this information for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that the functionality of our website may be restricted if you do not accept cookies.

4) Contacting Us

When you contact us (e.g. via contact form or email), personal data is collected. The data collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or contacting you and for the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your enquiry has been fully processed. This is the case when the circumstances indicate that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5) Data Processing When Opening a Customer Account and for Contract Processing

Pursuant to Art. 6(1)(b) GDPR, personal data is also collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. You may delete your customer account at any time by sending a message to the controller at the address stated above. We store and use the data provided by you for contract processing. After the contract has been fully processed or your customer account has been deleted, your data will be blocked in consideration of tax and commercial-law retention periods and deleted once these periods have expired, unless you have expressly consented to further use of your data or we reserve the right to further use the data as permitted by law.

6) Data Processing for Order Fulfilment

6.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on pursuant to Art. 6(1)(b) GDPR to the commissioned transport company and the commissioned credit institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order (name, address, email address) in order to personally inform you, within the legally prescribed period, of upcoming updates via an appropriate means of communication (such as by post or email) as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details will be used strictly for the purpose of notifications regarding updates owed by us and will only be processed by us to the extent necessary for the respective information.

For the processing of your order, we also work with the service provider(s) listed below, who support us wholly or partly in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

6.2 Use of Payment Service Providers

- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal, we pass your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of payment processing. The transfer is made pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6(1)(f) GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check relating to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The credit information may contain probability values (so-called score values). Where score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. Further information on data protection, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data where this is necessary for contractual payment processing.
- SOFORT
If you select the payment method “SOFORT”, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we pass the information provided by you during the ordering process together with information about your order pursuant to Art. 6(1)(b) GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will be transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. Further information on SOFORT's data protection provisions is available at the following Internet address: https://www.klarna.com/sofort/datenschutz

7) Contact for Review Reminders

Review reminder by Trusted Shops
If you have given us your express consent during or after your order pursuant to Art. 6(1)(a) GDPR, we will transmit your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that it can send you a review reminder by email.
You may withdraw your consent at any time by sending a message to the controller responsible for data processing or to the review platform.

8) Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) are played. If playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube”, these cookies are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive practices. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not want the data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such evaluation is carried out in particular pursuant to Art. 6(1)(f) GDPR on the basis of Google's legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website to meet users' needs. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. When using YouTube, personal data may also be transferred to servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations beyond our control.

Further information on data protection at “YouTube” can be found in the YouTube Terms of Service at https://www.youtube.com/static?template=terms and in Google's privacy policy at https://www.google.de/intl/de/policies/privacy

Where legally required, we have obtained your consent pursuant to Art. 6(1)(a) GDPR for the processing of your data described above. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, deactivate this service in the “Cookie Consent Tool” provided on the website.

9) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies, i.e. text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information, which can be used to record, collect, and evaluate simple actions such as visitor traffic on the website.

The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is generally transmitted to and stored on a Google server. This may also involve transmission to servers of Google LLC in the USA.

Google uses the information obtained in this way to evaluate your usage behavior with regard to AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may be transferred to third parties where required by law and/or where third parties process this data on Google's behalf.

Details on the processing initiated by Google AdSense and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

The processing of data described above is carried out pursuant to Art. 6(1)(f) GDPR for the purpose of targeted advertising to the user by third-party advertisers whose advertisements are displayed on this website on the basis of evaluated user behavior. This processing also serves our financial interest in exploiting the commercial potential of our website through the paid display of personalized third-party advertising content.

Further information about Google's data protection provisions is available at the following Internet address: https://www.google.de/policies/privacy/

You can permanently deactivate cookies for advertising preferences by preventing them through the appropriate settings in your browser software, or you can download and install the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you disable the use of cookies.

Where legally required, we have obtained your consent pursuant to Art. 6(1)(a) GDPR for the processing of your data described above. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option for objection described above.

10) Tools and Other Services

10.1 Google reCAPTCHA

On this website, we also use the reCAPTCHA function provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an entry is made by a natural person or is being misused through machine-based and automated processing. The service includes sending the IP address and, where applicable, other data required by Google for the reCAPTCHA service to Google and is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in establishing individual responsibility on the Internet and preventing misuse and spam. When using Google reCAPTCHA, personal data may also be transferred to servers of Google LLC in the USA.

Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

Where legally required, we have obtained your consent pursuant to Art. 6(1)(a) GDPR for the processing of your data described above. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option for objection described above.

10.2 Google Customer Reviews (formerly Google Certified Shops Program)

We work with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program enables us to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an email survey conducted by Google. If you give your consent pursuant to Art. 6(1)(a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The review you submit will then be combined with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your review will also be used for Google Seller Ratings. When using Google Customer Reviews, personal data may also be transferred to servers of Google LLC in the USA.

You may withdraw your consent at any time by sending a message to the controller responsible for data processing or to Google.

Further information about Google's data protection practices in connection with the Google Customer Reviews program can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de

Further information about data protection in connection with Google Seller Ratings can be found at this link: https://support.google.com/google-ads/answer/2375474

11) Rights of the Data Subject

11.1 The applicable data protection law grants you the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby reference is made to the legal basis cited for the respective conditions of exercise:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS POSSIBLE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of Storage of Personal Data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – where applicable – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent.

If statutory retention periods exist for data processed within the framework of contractual or contract-like obligations on the basis of Art. 6(1)(b) GDPR, this data will routinely be deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of the contract and/or we no longer have a legitimate interest in continuing to store it.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defence of legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.