Controller responsible for data processing pursuant to GDPRThe controller responsible for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
+49 231 22 24 1 - 0
+49 231 22 24 1 - 140
The controller responsible for processing personal data is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Safety and securityThis website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or enquiries directed to the controller). An encrypted connection can be identified by the character string "https://" and the lock symbol in your browser bar.
Collection and processing of dataWe collect, store and use your personal data solely in accordance with legal provisions. We use this information within the scope of conducting and expanding of our business relationship with you. In doing so, we fulfill our obligations towards you, in accordance with the purpose of establishing, performing and terminating a legal obligation, to offer you services, advice and support, provided that you have given us your consent to do so.
When you visit our webpages, we only collect those data which are transmitted to our server by your browser (referred to as "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:
- Website of ours which you are visiting
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you arrived at the page
- Browser used
- Operating system used
- IP address used (in anonymous form, where applicable)
Processing is carried out in accordance with point (f) of Article 6(1) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of illegal use.
In addition, personal information is not collected unless you provide it voluntarily, e.g., as part of a registration, survey, competition, contract, or information request via a contact form.
CookiesIn order to make visiting our website attractive and enable the use of certain functions, we use what are referred to as cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after your browser is closed (session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to remember your browser during your next visit (persistent cookies). If cookies are set, they collect and process certain individual user information, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data are also processed by individual cookies implemented by us, this processing is carried out in accordance with point (b) of Article 6(1) GDPR either to fulfill the contract or, in accordance with point (f) of Article 6(1) GDPR, to pursue our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
In some cases, we may work with marketing partners who help us make our website more interesting to you. For this purpose, cookies from partner companies are also stored on your hard drive (third-party cookies) when you visit our website. Where we work with the aforementioned advertising partners, the paragraphs below inform you individually and separately about the use of such cookies and the scope of the information collected in each case.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. This information is available for each browser at the following links:
Please note that if cookies are not accepted, the functionality of our website may be impaired.
Contacting usWhen you enter into contact with us (e.g., using a contact form or by e-mail), personal data is collected. The specific data collected in the case of a contact form is apparent from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or establishing contact and the accompanying technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to point (f) of Article 6(1) GDPR. If the purpose of your contact with us is to conclude a contract, the additional legal basis for the processing is point (b) of Article 6(1) GDPR. Your data will be erased after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been conclusively clarified, and provided that there are no legal storage obligations to the contrary.
Data processing when opening a customer account and for executing contractsPursuant to point (b) of Article 6(1) GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The specific data collected is evident from the respective input forms. A deletion of your customer account is possible at any time and can be initiated by sending a message to the address of the controller indicated above, or by sending an e-mail to webshop(at)limo.de.
We will store and use the data you provide in order to execute the contract. Once the contract has been fully executed or your customer account has been deleted, your data will be blocked, with due regard to retention periods under tax and commercial law, and will be erased at the end of these periods, unless you have expressly consented to further use of your data, or unless we have reserved the right to a legally permissible further use of data, about which we inform you below accordingly.
Disclosure of dataAs a general rule, the data we collect will only be shared if:
- You have given your express consent in accordance with point (a) of the first subparagraph of Article 6(1) GDPR; or
- The disclosure is necessary pursuant to point (f) of the first subparagraph of Article 6(1) GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data; or
- We are legally obligated to disclose the data pursuant to point (c) of the first subparagraph of Article 6(1) GDPR; or
- Doing so is legally permissible and required pursuant to point (b) of the first subparagraph in Article 6(1) GDPR for the execution of contractual relationships with you or in order to take steps at your request before entering into a contract.
In addition, the data may be shared in connection with official enquiries, court orders and legal proceedings where it is necessary to do so for prosecution or enforcement of the law.
Use of your data for direct marketing
Subscription to our e-mail newsletterIf you subscribe to our e-mail newsletter, we will regularly send you information about our offers. Your e-mail address is the only mandatory information needed to send the newsletter. The provision of any further data is voluntary and will be used to address you personally. We use what is known as the double opt-in procedure to send the newsletter. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you agree to receive the newsletter. We will then send you a confirmation e-mail in which you will be asked to confirm that you wish to receive newsletters in the future by clicking on an appropriate link.
Newsletter delivery through CleverReachOur e-mail newsletter is sent through the technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany ("CleverReach"), with whom we share the data you provide when you subscribe to our newsletter. This disclosure takes place in accordance with point (f) of Article 6(1) GDPR and serves our legitimate interest in the use of a promotionally effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g., e-mail address) will be stored on CleverReach's servers in Germany and/or Ireland.
CleverReach uses this information to send and statistically evaluate the newsletter on our behalf. For statistical purposes, the e-mails sent contain what are known as web beacons or tracking pixels, which constitute one-pixel image files stored on our website. This enables us to determine whether a newsletter message has been opened and which links have been clicked. With the help of what is called conversion tracking, it is also possible to analyze whether a predefined action (e.g., purchase of a product on our website) has taken place after the link in the newsletter was clicked. Technical information is also collected (e.g., date and time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; direct personal identification is not possible. This data is used solely for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
We have concluded an order processing agreement with CleverReach in which we place CleverReach under the obligation to protect the data of our customers and refrain from sharing it with third parties.
You can read more about CleverReach's data analysis here:
Data processing for order processingThe personal data we collect are shared with the transport company commissioned with delivery as part of contract execution, insofar as it is necessary to do so for the delivery of the goods. We share your payment data with the commissioned credit institution within the scope of payment processing, insofar as it is necessary to do so for payment processing. Where payment service providers are used, we provide explicit information about this below. The legal basis for the disclosure of the data in this case is point (b) of Article 6(1) GDPR.
Credit assessment - Creditreform BoniverseLIMO GmbH regularly checks the creditworthiness of our customers, including our existing customers, when concluding contracts and in certain cases where a legitimate interest is present. For this purpose, we collaborate with Creditreform Dortmund/ Witten Scharf KG, Phoenixseestr. 4, 44263 Dortmund, Germany, from which we obtain the necessary data. On behalf of Creditreform Boniversum, we hereby provide the following information in advance in accordance with Article 14 EU GDPR:
Creditreform Boniversum GmbH is a consumer information agency. It operates a database in which creditworthiness information about private individuals is stored. Creditreform Boniversum provides credit information to its customers on this basis. Its customers include, for example, credit institutions, leasing companies, insurance companies, telecommunications companies, receivables management companies, and mail order, wholesale and retail companies, as well as other companies that supply goods or services. Within the scope of legal provisions, part of the data available in the information database is also used to supply other company databases, including for address trading purposes.
In the Creditreform Boniversum database, information is stored in particular about the name, address, date of birth and, where applicable, e-mail address, payment history and shareholdings of persons and companies. The purpose of processing the stored data is to provide information on the creditworthiness of the person and company in question. The legal basis for the processing is point (f) of Article 6(1) EU GDPR. Accordingly, information about this data may only be provided if a customer credibly demonstrates a legitimate interest in having knowledge of this information. If data is transferred to countries outside the EU, this takes place on the basis of what are referred to as the "standard contractual clauses," which can be accessed or sent by the customer from the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32001D0497&from=DE.
The data are stored for as long as the knowledge thereof shall be necessary to satisfy the purpose of storage. As a rule, knowledge is required for an initial storage period of three years. Once this period expires, the continued necessity of storage is reviewed; otherwise, the data will be erased on the exact day of expiration. If a case is settled, the data will be deleted three years to the day after settlement. Pursuant to Section 882e of the German Code of Civil Procedure (ZPO), entries in the list of debtors are cancelled upon the expiration of three years to the day from the date of the instructions to enter a debtor in said list. Legitimate interests within the meaning of point (f) of Article 6(1) GDPR can be: credit decisions, initiation of business transactions, shareholding, claims, credit assessments, insurance contracts, enforcement information.
The customer has the right to access information from Creditreform Boniversum GmbH about the customer’s personal data stored there. If the data stored about the customer is incorrect, the customer has a right to rectification or erasure. If it is not possible to immediately determine whether the data is incorrect or correct, the customer has a right to block the respective data until clarification ensues. If the data is incomplete, its completion may be requested.
If the customer has given consent to the processing of the data stored at Creditreform Boniversum, the customer has the right to withdraw this consent at any time. The withdrawal does not affect the lawfulness of the processing of data based the customer’s consent before any such withdrawal. Should the customer have any objections, requests or complaints relating to privacy, the customer can contact the data protection officer of Creditreform Boniversum at any time. The data protection officer will provide quick and confidential assistance with all questions relating to privacy. The customer can also lodge a complaint about the processing of data by Boniversum with the state data protection officer responsible for the customer’s federal state.
The customer data stored by Creditreform Boniversum comes from publicly accessible sources, from debt collection agencies, and from Creditreform Boniversum’s customers.
In order to describe a customer’s creditworthiness, Creditreform Boniversum creates a score based on the customer data. The score incorporates data on age and gender, address data and, in some cases, payment history data. These data are incorporated into the score calculation with different weighting. LIMO GmbH uses the Creditreform Boniversum scores as a tool for its own contract decisions.
Use of payment service providers (payment services)
PaypalWhen paying with PayPal, credit card through PayPal, direct debit through PayPal or—where offered—PayPal Pay After Delivery or PayPal Credit, we share your payment details with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal") as part of the payment processing. The disclosure takes place in accordance with point (b) of Article 6(1) GDPR and solely to the extent necessary for payment processing.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if it should be necessary to do so in order to process your payment in accordance with a contract.
Web analytics services
Google (Universal) AnalyticsThis website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will usually be transferred to and stored on a Google server, in which case it may also be transferred to Google LLC servers in the United States.
This website exclusively uses Google Analytics with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by truncation and prevents persons from being directly identified. As a result of this extension, Google will first truncate your IP address within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the whole IP address first be transferred to a Google LLC server in the United States and then truncated. In these exceptional cases, this processing takes place in accordance with point (f) of Article 6(1) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
As an alternative to the browser plug-in or from browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting cookies from this site in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics
In the event that personal data is transferred to Google LLC based in the USA, Google LLC has obtained certification for the "Privacy Shield" US/European data protection agreement, which ensures compliance with the level of privacy applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. The first time a page is accessed, the user is assigned a unique, permanent and anonymous ID, which is set across all devices. This makes it possible to associate interaction data from different devices and from different sessions with a single user. The user ID does not contain any personal data and does not transmit such data to Google.
You can object to the collection and storage of data via the user ID at any time with future effect. To do so, you must disable Google Analytics on all systems that you use, for example, in another browser or on your mobile device.
You can disable Google Analytics using a Google browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser plug-in or from browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data via the user ID from this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics
Further information about Google (Universal) Analytics can be found here:
Rights of the data subjectApplicable data protection law grants you comprehensive rights as a data subject (right of access to information and right to obtain intervention) vis-à-vis the controller with regard to the processing of your personal data, about which rights we inform you below:
- Right of access pursuant to Article 15 GDPR: In particular, you have a right of access to your personal data that we process as well as to the following information: the purposes of the processing; the categories of personal data processed; the recipients or categories of recipients to whom your data have been or will be disclosed; the planned storage period or the criteria used to determine the storage period; the existence of a right to rectification, cancellation, restriction of processing, to object to the processing, to lodge a complaint with a supervisory authority; information about the source of your data where we have not collected it from you; the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved and the significance for you and envisaged consequences of such processing; as well as your right to be informed of the safeguards pursuant to Article 46 GDPR that exist where your data are transferred to third countries;
- Right to rectification pursuant to Article 16 GDPR: You have the right to have inaccurate data concerning you rectified without undue delay and/or to have your incomplete data stored by us completed;
- Right to erasure pursuant to Article 17 GDPR: You have the right to obtain the erasure of your personal data if the conditions of Article 17(1) GDPR are met. However, this right does not exist in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
- Right to restriction of processing pursuant to Article 18 GDPR: You have the right to obtain restriction of processing of your personal data as long as the accuracy of your data, which you contest, is verified; if you oppose the erasure of your data due to impermissible data processing and request the restriction of their processing instead; if you require your data to establish, exercise or defend legal claims after we no longer need this data once they have served their purpose; or if you have objected on grounds relating to your particular situation pending the verification whether our legitimate interests override the aforementioned grounds;
- Right to notification pursuant to Article 19 GDPR: If you have established the right to rectification, cancellation or restriction of processing by the controller, the controller is obligated to communicate this rectification or erasure of the data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed of such recipients.
- Right to data portability in accordance with Article 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller insofar as this is technically feasible;
- Right to withdraw consent given pursuant to Article 7(3) GDPR: Once you have given consent to the processing of data, you have the right to withdraw this consent at any time with future effect. In the event of withdrawal, we will immediately delete the data concerned unless further processing can be supported on a legal basis for processing without consent. The withdrawal of the consent does not affect the lawfulness of the processing based on consent before its withdrawal;
- Right to lodge a complaint pursuant to Article 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have the right—without prejudice to any other administrative or judicial remedy–to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.
RIGHT OF OBJECTIONIf, in the course of balancing interests, we process your personal data on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with future effect on grounds relating to your particular situation.
If you make use of your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and fundamental freedoms or for the establishment, exercise or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.
You may exercise your right to object as described above.
If you make use of your right to object, we will stop processing the data concerned for direct marketing purposes.
Storage period for personal dataThe storage period for personal data is determined by the respective legal retention period (e.g., retention periods under commercial and tax law). After this period has expired, the corresponding data is routinely erased if it is no longer required for the performance or initiation of contracts and/or if we no longer have a legitimate interest in further storage.
Data protection officerIf you have any concerns regarding privacy, you can contact the LIMO GmbH data protection officer, who is also available in the event of requests for information, suggestions or complaints.
External company data protection officer:
Data Protection Officer Marc Mätzig
Please enter LIMO privacy in the subject line.