Privacy Policy

- Privacy Policy -

The following information gives you an overview of the processing of your personal data when you visit the websites victorianhouse.de or victorianhouse-shop.de.

Personal data are all data that can be individually assigned to you or with which you can be personally identified.

Processing is carried out with or without the help of automated processes or any such series of processes in connection with personal data such as the collection, collection, organization, ordering, storage, adaptation or modification, reading, querying, use, Disclosure by transmission, distribution or other form of provision, comparison or linking, restriction, deletion or destruction.

We will inform you below who is responsible for data processing and who you can contact if you have any questions. We will also inform you about what data we collect from you and how we use it. We will also clarify your rights under applicable data protection law.

1. Who is responsible for data processing?

The Victorian House Gastro GmbH is responsible for the processing of your personal data when visiting the website victorianhouse.de or victorianhouse-shop.de. The contact details are:

The Victorian House Gastro GmbH
Frauenstrasse 14
80469 Munich

Tel: +49 (0) 89 121 349 80
Email: custumerservices@victorianhouse-shop.de

2. What data do we process about you when you visit our website?

2.1 Collection of general data and logs when visiting the website

When you visit our website, the provider of the page automatically collects and stores information in so-called server log files. The data is automatically sent to us by your browser. These are:

• Visited website
• Time and time of access
• Amount of data sent in bytes
• Source / reference from which page you came to our site
• Browser used
• Operating system used
• IP address used

The data is not merged with other data sources.

Purpose of data collection / legal basis:

They help us to deliver the content of our website correctly, to ensure the functionality of the website, to optimize the content of our website and to ensure the security of our information technology systems. Our legitimate interest in data processing within the meaning of the legal basis of Art. 6 Para. 1 lit. f GDPR.

Storage period:

The anonymous data of the server log files are stored for a maximum of 7 days and then deleted. Do data need to be saved for reasons of evidence, e.g. To clarify cases of abuse, the data are excluded from deletion until the incident has been finally clarified.

2.2 Cookies

We use cookies on our website. Cookies are small text files that are stored and saved on the hard drive of your device. This cookie contains a characteristic string that allows us to clearly identify the browser when it is called up again. No personal data is stored in the cookies we use. The cookies we use are also not combined with personal data.

Purpose of data collection / legal basis:

The use of cookies facilitates navigation and an increased level of user friendliness. They help us, for example, to ensure that the data you enter during the ordering process (e.g. shopping cart function) or registration process is retained. Cookies also help us to identify particularly popular pages on our website. Our legitimate interest in data processing within the meaning of the legal basis of Art. 6 Para. 1 lit. f GDPR.

Storage period:

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies, which are shown separately in the following explanation, remain stored on your end device until you delete them (so-called "persistent cookies"). These enable us to recognize your browser the next time you visit.

Removal options:

You can set your browser so that it informs you about the placement of cookies. So the use of cookies becomes transparent for you. You can also set your browser so that you completely exclude the setting of cookies. If the use of cookies is completely excluded, not all functions of our website may be fully usable. Furthermore, cookies that have already been set can be deleted at any time via your browser or other software programs.

2.3 Ordering in the online shop

Ordering in the online shop is possible both as a non-registered customer using an order form and as a registered customer using a customer account.

To place an order as a non-registered customer using the order form in the online shop, you must provide your surname, first name, company, address, email address and optionally the telephone number. Furthermore, a possibly different delivery address and, depending on the selected payment variant, the necessary payment data of the user must be entered. In addition, your IP address, the agreement to terms and conditions and data protection, where applicable the transaction number of the payment provider and the time of the order as well as the order including the sales and the ordered products are saved.

If you would also like to register with us as a customer, a password will be saved for your customer account in addition to the above data. Your email address and your password are used for identification and registration in the customer account.

Purpose of data collection / legal basis:

Data entered during the ordering process will only be used to carry out and process the orders you have ordered. These include the delivery of goods, processing payments, redeeming vouchers, processing returns and claims for defects.

In this context, we pass on your data to transport companies and payment providers, observing the principle of data economy and only to the extent necessary for delivery or payment processing. We can pass on data on outstanding claims to lawyers or debt collection companies for the purpose of collecting claims.

The legal basis for the data processing described are measures to fulfill the contract and the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. Insofar as processing of personal data is necessary to fulfill legal obligations, to which we are subject, Art. 6 Para. 1 lit. c GDPR as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if these interests outweigh the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, Art. 6 para. 1 lit. f GDPR as the legal basis for processing.

Storage period:

The data will be deleted as soon as it is no longer required to achieve the purpose for which the data was collected. For customer account data that are not used to fulfill a contract, this is the case after changing or ending the customer account. Purchasing data will be deleted if it is no longer required to process the contract. The limitation periods for warranties of generally 2 years and, if applicable, commercial and tax retention obligations of 6 - 10 years must be observed.

2.4 Payment methods in the online shop

Payment data is collected as part of the ordering process. For orders on our website you have the option to choose between different payment methods.

(1) Credit card payment and direct debit

If you pay by credit card, the payment is processed by the payment service provider TeleCash GmbH & Co. KG, Marienbader Platz 1, 61348 Bad Homburg (hereinafter referred to as "TeleCash"), to whom we provide the personal data you entered during the ordering process (first and last name , Street, house number, post code, city phone number) and information about your order.

If you opt for direct debit with an EC card, the personal data entered in the order process (first and last name, street, house number, postcode, city phone number) along with information about your order and account details will be passed on to TeleCash.

TeleCash reserves the right to carry out a credit check based on the personal data you have provided as well as other data (such as shopping cart, invoice amount, order history, payment history). The credit check can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is used to calculate the score values. In addition to internal TeleCash criteria in accordance with Art. 6 Para. 1 lit. f GDPR, identity and credit information from external credit agencies are included.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if these interests outweigh the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, Art. 6 para. 1 lit. f GDPR as the legal basis for processing.

Storage period:

The data will be deleted as soon as it is no longer required to achieve the purpose for which the data was collected. For customer account data that are not used to fulfill a contract, this is the case after changing or ending the customer account. Purchasing data will be deleted if it is no longer required to process the contract. The limitation periods for warranties of generally 2 years and, if applicable, commercial and tax retention obligations of 6 - 10 years must be observed.

2.4 Payment methods in the online shop

Payment data is collected as part of the ordering process. For orders on our website you have the option to choose between different payment methods.

(1) Credit card payment and direct debit

If you pay by credit card, the payment is processed by the payment service provider TeleCash GmbH & Co. KG, Marienbader Platz 1, 61348 Bad Homburg (hereinafter referred to as "TeleCash"), to whom we provide the personal data you entered during the ordering process (first and last name , Street, house number, post code, city phone number) and information about your order.

If you opt for direct debit with an EC card, the personal data entered in the order process (first and last name, street, house number, postcode, city phone number) along with information about your order and account details will be passed on to TeleCash.

TeleCash reserves the right to carry out a credit check based on the personal data you have provided as well as other data (such as shopping cart, invoice amount, order history, payment history). The credit check can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is used to calculate the score values. In addition to internal TeleCash criteria in accordance with Art. 6 Para. 1 lit. f GDPR, identity and credit information from external credit agencies are included. TeleCash may pass on the personal data to affiliated companies and other service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations entered into by TeleCash or the data is to be processed on behalf of TeleCash. Further information on TeleCash's data protection declaration can be found at: https://www.telecash.de/datenschutz/.

The transmission of personal data takes place exclusively for the purpose of payment processing of the obligations established by you and to prevent misuse of the payment service TeleCash. The legal basis for processing and forwarding your data to TeleCash is the fulfillment of the contract concluded with you within the meaning of Art. 6 Para. 1 lit. b GDPR and our legitimate interest in secure payment processing in accordance with Art. 6 Para. 1 lit. f GDPR.

(2) PayPal

Alternatively, there is the option of processing the payment process with the online payment service provider PayPal. The European operating company of PayPal is PayPal (Europe) S.à.r.l & Ci. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.

If you select the payment method "PayPal" in our online shop, data will be automatically transmitted to PayPal. By selecting the payment option, you consent to the transmission of personal data required for payment processing. These are usually: first name, last name, address, email, IP address, telephone number, mobile phone number and other data necessary for payment processing, such as the invoice amount and the order number.

The data transmitted to PayPal may be transmitted by PayPal to credit agencies. This transmission serves the identity and credit check. PayPal may also pass on your personal data to third parties if this is necessary to fulfill the contractual obligations or if the data are to be processed on order. The applicable data protection regulations can be viewed at the following link:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full/
 

The purpose of the transmission of the data is to process the payment and thus fulfill the contract and prevent fraud. The legal basis for data processing is, in addition to the consent given to PayPal, the fulfillment of the contract in accordance with Art. 6 para. 1 lit b GDPR.

(3) Sofortüberweisung

There is also the possibility to pay the payment via Sofortüberweisung. The provider is Sofort GmbH, Theresienstraße 12, 80339 Munich. Anyone with an activated online banking account with a PIN / TAN procedure can generally use Sofortüberweisung as a payment method.

The data for immediate transfer are collected directly from Sofort GmbH without the The Victorian House Gastro GmbH's ability to inspect. As part of the ordering process, you will be automatically redirected to the secure payment form of Sofort GmbH. Sofort GmbH collects your name, IBAN, PIN and TAN of your online banking account as well as the payment amount and subject provided by us for payment. The applicable data protection regulation can be viewed at the following link: https://www.klarna.com/sofort/#cq-0

The processing of personal data is required for payment via Sofortüberweisung. The legal basis is the fulfillment of a contract in accordance with Art. 6 Para. 1 lit. b GDPR

2.5 Newsletter

On our website you have the option of signing up for our free e-mail newsletter.

To register for the newsletter, the following data must be entered in our registration form: title, first name, last name, email address. We also save the date and time of your registration, your IP address and the Internet service provider. After submitting the registration form, you will receive an email from us asking for confirmation (double opt-in). Your registration will only become effective if you confirm the registration by clicking / clicking the link in this email.

Purpose of data collection / legal basis:

As part of our newsletter, we will regularly inform you about offers, products and promotions from The Victorian House Gastro GmbH for your own advertising purposes. The personal data collected as part of the newsletter service is not passed on to third parties.

The purpose of collecting the email address is to deliver the newsletter. The collection of further personal data is used to address you personally and to avoid misuse of the newsletter service and the email used. The legal basis for processing the data collected as part of the newsletter registration is your consent, Art. 6 para. 1 lit. a GDPR.

Objection and removal option:

You can revoke your consent to the use of your e-mail address for advertising purposes at any time with future effect by clicking on the "Unsubscribe" link at the end of the newsletter. Alternatively, you can also send a text message (e.g. email, fax, letter) to the contact details below.

Storage period:

The data is stored for the duration of the registration for the newsletter. After revoking your consent to receive the newsletter, the data will be deleted.

2.6 Establishing contact / email

You have the possibility to contact us in various ways (e.g. by phone, email, fax or letter). If you contact us, all data relevant for the purpose of contacting us will be collected. This includes, in particular, last name, first name, email address, address, telephone number and reservation data, if applicable.

Purpose of data collection / legal basis:

The data you provide in connection with your request will only be used to process your orders, answer your inquiries, provide you with offers and, if necessary, initiate and fulfill contracts with you.

If necessary, your personal data can also be passed on to our suppliers and cooperation partners, insofar as this is necessary to process your request.

The legal basis for the data processing described is Art. 6 Para. 1 lit. b and f GDPR, pre-contractual measures or measures to fulfill the contract as well as, if applicable, protection of legitimate interests based on our interest in answering inquiries from customers and other people. If you do not agree to the use of your data to process your request, you can object to the use of your data with future effect at any time.

Storage period:

We store the data for the duration of the reservation. After canceling your reservation or after the end of your visit, the data will be deleted.

2.8 Competition

From time to time we offer the opportunity to take part in a competition on our website. In order to run the competition, we process your data (last name, first name, address, email address and any other data necessary for the competition). Your data will be processed by us to check the eligibility, to determine the winner, to notify him and to send the prize. The legal basis for the data processing described is the implementation of the competition in accordance with Art. 6 Para. 1 lit. b GDPR. The data collected as part of the running of the competition will be deleted two months after the running of the competition.

2.9 application

We provide information on advertised positions on our website. You have the option of applying for advertised positions at the specified position by email or submitting unsolicited applications. Your data will be received by the HR department and passed on to the person responsible for handling the application process. All parties involved treat your application documents with due care and confidentially. The legal basis for the data processing described is Art. 6 Para. 1 lit. b GDPR and § 26 GDPR.

Data on an unsuccessful application for an advertised position will be deleted as soon as it is no longer required for the selection process. This is usually the case at the latest six months after the application process has been completed.

2.10 External links

Our website contains links to the social networks Facebook, Google Plus and Instagram as well as the rating platforms Yelp, Trip Advisor, Flickr and Foursquare. In addition, a link to Google Maps, a service for displaying interactive maps and directions is offered. The link does not establish a direct connection with the servers of the providers with your browser. With a click on the respective link you leave our website and establish a direct connection between your browser and the page of the respective provider. We cannot assume any responsibility for the confidential handling of your data on the websites of third parties, as we have no influence on whether these companies comply with the data protection regulations.

The purpose and scope of the data collection and the further processing and use of the by the providers and their pages as well as your rights and setting options to protect your privacy can be found in the privacy policy of the provider.

• Facebook: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, data protection notice https://www.facebook.com/privacy/explanation

• Google+: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA

Data protection declaration: https://policies.google.com/privacy?hl=de

• Instagram: Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025 USA

Data protection declaration: https://instagram.com/about/legal/privacy/

• Flickr: SmugMug Inc. Suite 200, 67 E Evelyn Avenue, Mountain View, CA 94041, USA

Data protection declaration: https://www.flickr.com/help/privacy

• Foursquare: Foursquare Labs Inc., 50. W 23rd Street, NY 10010, USA

Data protection declaration: https://de.foursquare.com/legal/privacy

• Yelp Ireland Ltd., 80 Sir john Rogerson`s Quay, Dublin 2, Ireland

Data protection declaration: https://www.yelp.de/tos/privacy_de_20180525

• Google Maps: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. https://www.google.de/intl/de/policies/privacy/

3. Disclosure of data

Your personal data will generally only be passed on to third parties, insofar as this is necessary to fulfill the contract, we or third parties have a legitimate interest in the transfer and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data or yours There is consent for this.

Outside of The Victorian House Gastro GmbH, service providers who support us in fulfilling our tasks can have access to your data. These are service providers in the following categories:

- hosting service provider for the operation of our servers,
- Development service provider for the maintenance and support of software applications,
- Analysis service provider for the evaluation of data and analysis of the use of the website,
- Parcel shipping service providers and suppliers for the delivery of orders
- Payment service providers and banks for processing payments

In addition, data can be transmitted to third parties in the event that for the transfer according to Art. 6 para. 1 lit. c GDPR there is a legal obligation.

Data processing takes place on the basis of Art. 6 Para. 1 lit b GDPR for the fulfillment of a contract or pre-contractual measures as well as for the protection of our legitimate interests on the basis of Art. 6 Para. 1 lit f GDPR.

A further transmission of the data does not take place or only if you have expressly consented to the transmission.

4. SSL encryption

For security reasons and to protect the transmission of confidential content, such as orders and inquiries that you send to us, our Internet pages use an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http: //" to "https: //" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

However, we would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. It is not possible to completely protect data from third-party access.

5. What rights do you have?

5.1 Information

You have the right to request confirmation from us as to whether personal data concerning you will be processed by us. If this is the case, you have a right to information about your personal data processed by us and the information detailed in Art. 15 GDPR.

5.2 Correction

You have the right to request that we immediately correct your incorrect personal data and, if necessary, complete incomplete personal data.

5.3 Restriction of processing

You have the right to request that the processing of your data be restricted. Please note that the restriction of processing depends on the existence of a legitimate reason within the meaning of Article 18 GDPR, such as if the data subject has objected to processing, for the duration of the review by the controller.

5.4 Deletion

You have the right to request that we delete your personal data if there is one of the reasons listed in Art. 17 GDPR, e.g. if the data is no longer required for the intended purposes for which it was collected or if the use of the data is revoked by you. This does not apply if processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

5.5 Right to information

If you have exercised your right to correction, restriction of processing or deletion against us, we are obliged to inform all recipients to whom your personal data has been disclosed of this correction, restriction of processing or deletion of the data, unless this proves to be impossible or involves a disproportionate effort.

You have the right to be informed by us about these recipients.

5.6 Objection

You have the right at any time to object to the processing of your personal data pursuant to Section 21 GDPR, which is based on Art. 6 Para. 1 lit. e GDPR (data processing in the public interest) and Art. 6 para. 1 lit. f GDPR (data processing based on a balance of interests). If you file an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your objection is directed against direct advertising, you have a general right to object. In this case, we will no longer process your personal data for direct marketing purposes. This also applies to profiling related to direct advertising.

If you would like to exercise your right to object, you can send it to us using the contact details above, preferably by email to customerservices@victorianhouse-shop.de

5.7 Right to complain

Without prejudice to any other administrative or extrajudicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the General Data Protection Regulation. The complaint can be lodged with a supervisory authority in the member state of your residence, your place of work or the place of the alleged violation.

5.8 Data portability

According to Art. 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request the transfer to another person responsible.

5.9 Revocation of your consent to data processing

You can revoke your consent to the processing of your data at any time with future effect. This also applies to the revocation of consent that you gave us before the General Data Protection Regulation came into effect, i.e. before May 25th, 2018.

6. Changes to the data protection declaration

We strive to ensure that our data protection declaration always complies with current legal requirements. In order to take this into account and to adapt the data protection declaration to a changed scope of services, we reserve the right to make changes to this data protection declaration in the future. The current version of the data protection declaration will then apply to your next visit.