Use of our online shops

Contents

1. Creation of a user account

2. Ordering products

3. Payment

4. Delivery

When you register for a WMF Professional Coffee Machines online shop customer account, you create a personal customer account. Registration is possible as part of an order or at any time independently of a purchase.

A) Purpose of the processing

When you register for a customer account, we collect and process the following data:

• Salutation (optional)

• First name and surname

• E-mail address

• Password (encrypted)

After completing registration, you can enter billing and delivery addresses for order transactions and view past orders in the online shop.

B) Scope of the processing

This data is processed in order to:

• Enable you to manage your orders

• Offer you faster and simpler order processing

• Grant you access to your order history.

C) Legal basis of the processing

Legal basis here is Article 6(1)(b) GDPR for the fulfillment of a contractual relationship or for the implementation of pre-contractual measures.

D) Revocation

You can change your stored data yourself within your customer account. You can also delete your account with future effect, thereby preventing further data processing. This applies exclusively to your account for the online shop. The storage of past orders in our systems for tax law purposes remains unaffected.

E) Storage period

Your personal data will be stored for the duration of your customer account. After deletion of the account, your data will be stored in accordance with the statutory retention obligations or deleted immediately, provided there are no legal obligations.

Irrespective of this, we are required under commercial and tax law to store your data for a period of up to ten years.

F) Recipients of the data

The recipients of the data are our web agencies and our web hosting service providers who work for us as part of order processing. Your data may also be passed on to third parties if this is necessary to fulfill the contract (e.g. shipping service providers, payment providers) or if there is a legal obligation to do so.

If you wish to order goods from our online shop, a contract can only be concluded with us if you provide the personal data we require for the purpose of processing your order.

A) Purpose of the processing

Mandatory information is labeled as such; all other information is voluntary. The processed data categories are contact data, company data, customer data, personal data, order data, delivery data, invoice data and payment data.

B) Scope of the processing

We will process data you have provided for processing contract initiation, orders and order processing.

C) Legal basis

The processing of your data is carried out in accordance with Article 6(1)(b) GDPR for the fulfillment of a contractual relationship or for the implementation of pre-contractual measures.

D) Storage period

Your data will be processed for as long as is required for the existing customer relationship. Irrespective of this, we are required under commercial and tax law to store your data for a period of up to ten years.

E) Recipients of the data

The recipients of the data are our web agencies and our web hosting service providers, who work for us within the scope of order processing. In addition, your data may be passed on to third parties if this is necessary for the fulfilment of the contract (e.g. shipping service providers, payment providers) or if there is a legal obligation to do so.

A) Purpose of processing

We use the payment service provider Adyen to process payments in our online shop. The purpose of processing is to provide the payment method you have chosen (credit card – Visa or Mastercard, PayPal or Billie) and to carry out payment transactions securely, efficiently and reliably.

B) Scope of processing

As part of the payment process, the personal data required for payment processing is transmitted to Adyen. This may include, in particular, your name, billing and delivery address, email address, IP address, payment amount, currency details, transaction data and, depending on the payment method selected, the relevant payment information (e.g. credit card details or account information).

Adyen processes this data to execute the payment, prevent fraud and comply with legal obligations. Depending on the selected payment method, additional data may be forwarded to the respective payment providers (e.g. credit card organisations, PayPal or Billie). Processing is carried out exclusively for the purpose of payment processing.

C) Legal basis

The processing of your data for payment processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of the contract, as payment processing is necessary for the execution of the purchase contract.

If a credit check is carried out (e.g. for payments via Billie), this is done on the basis of Article 6(1)(f) GDPR due to our legitimate interest in avoiding payment defaults.

D) Storage period

We only store your personal data for as long as is necessary to process the payment and to comply with statutory retention obligations. Statutory retention periods, in particular those under commercial and tax law, remain unaffected. Adyen stores the data in accordance with the applicable legal requirements and its own retention guidelines.

E) Recipients of the data

The recipients of the data are Adyen N.V. and, where applicable, affiliated companies and the respective selected payment method (Visa, Mastercard, PayPal or Billie). Data processing may also take place in third countries. Adyen ensures an adequate level of data protection through appropriate safeguards within the meaning of Article 44 et seq. GDPR. A data processing agreement has been concluded with Adyen.

• Registered office: Adyen N.V., Simon Carmiggeltstraat 6–50, 1011 DJ Amsterdam, Netherlands

• Website: https://www.adyen.com/

• Data protection information: https://www.adyen.com/privacy-policy