Privacy Policy
Eligible from 14.1.2020
1. Register holder
1001Spirits (B Office GmbH DE318767726 - Court: District Court Flensburg HRB 12943 FL)
Grönfahrtweg 5
24955 HARRISLEE
Germany
info@boffice-gmbh.com
www.1001sprits.com
2. Contact details
1001Spirits support team
B Office GmbH
Grönfahrtweg 5
24955 HARRISLEE
Germany
support@1001spirits.com
3. The purpose for the use of a register and content of the register
- Personal data is used for the following purposes:
- packing and processing orders
- improving services
- client matters
- analytics and profiling
- marketing
- newsletters and other communication
- surveys and opinion polls
Data subject shall not obliged to disclose the information mentioned in the prospectus, but a failure to provide certain personal information may cause the service provided by the controller to be partly unavailable.
The register holder can handle the following categories of information:
- basic personal information (name, birth date, gender, language, contact details)
- IP address
- profiles on social media
- client relations and information related to ordered services
- client relations to shipping companies and/or info on shipping orders
4. Basis of keeping the register
Register is keep to handle and process all orders properly. We also need details to keep our support working.
5. Regular sources of information, right to resist processing, automatic decision making and profiling
Personal data is collected from the data subject when the data subject uses the service and via email, telephone, social media, cookies, contracts, pickups and in other situations where the client discloses personal data. Personal data can also be updated by obtaining appropriate data services from the companies and authorities providing them.
Registered personal data can also be collected from
• Research panel agencies
• Registers managed by clients provided with registered persons’ consent for their personal information to be used in market research
• Personal data can also be collected and updated using the services of authorities and companies providing data
The user has the right, at any time, to oppose the automatic decision-making and profiling of personal data processing, unless the Controller can demonstrate that there is a substantial and well-founded reason for processing that overrides the rights, privileges and immunities of the data subject, or if it is for the purpose of building, presenting or defending a lawsuit. If the user objects to the processing of personal data for direct marketing, they may no longer be processed for this purpose. User profiling shall be based on their explicit consent.
Newsletter and SMS marketing can be opted out via campaigns or contacting our support team at any time.
6. Regular destinations of disclosed data and whether the data is transferred to countries outside the European Union or the European Economic Area
Personal data may only be transferred outside the territory of the Member States of the European Union or to the European Economic Area if the country concerned provides sufficient level of data protection. Information shall not be disclosed to third parties for any other purposes than service related processing.
7. Data protection principles and disclosure of information
A. Manual materials
Manual materials are kept in a locked space and are available only to those entitled to the materials.
B. Digitally stored data
The personal data contained in the register will be kept confidential. The use of the register is controlled by the controller in the organization and access to the personal register is restricted so that the information contained in the register stored in the computerized system is accessible and entitled to use only by the registrar’s employees and/or contractors who have the right to do so.
The computer system is protected by security software. Access to the system requires each user from the register to enter a username and password. The computer network and hardware in which the register is located are protected by a firewall and other appropriate technical measures such as encryption. Information on the website is protected by SSL secure connection.
The processing of personal data can be outsourced to a third party.
8. Right of access and realization of the right of access
Data subject has the right to check what information about them has been stored in the personal register.
Data subject must send an inspection as a separate signed document to:
B Office GmbH
Suederstrasse 75
24955 Harrislee
Germany
9. Rectification and the realization of the rectification
The data subject has the right to influence their personal data processing.
The controller must rectify, erase or supplement personal data contained in its personal data file if it is erroneous, unnecessary, incomplete or obsolete as regards the purpose of the processing. The controller may also repair such information on their own initiative.
A notification should be sent as a separate signed document to:
B Office GmbH
Suederstrasse 75
24955 Harrislee
Germany
10. Duties of the controller, transferring rights of the data subject, right to be forgotten
You can request us to remove your account form our webstore but we've right to remain details needed to meet legal needs for Germany authorities.
Personal data shall only be retained as long as there is a valid purpose for the processing. When there is no valid purpose for processing, the data will be erased appropriately. The data subject has the right to withdraw consent for the processing of data. If the data subject withdraws consent, data subject may file a written request to the controller for the deletion of data, for which there is no other legitimate purpose for processing.
