Privacy policy

Privacy Policy

Privacy policy in accordance with the EU General Data Protection Regulation for “natural persons” on the websites www.mamba.net

As of: February 2020

We are delighted that you are visiting our website www.mamba.net and thank you for your interest in our company and our products and services. Below, we provide information about the collection of personal data when using our websites and offers.

We would like to emphasize at this point that it is not our business to sell your customer data to third parties!

1. Responsible for data processing

The responsible party in accordance with Art. 4 (7) of the General Data Protection Regulation (GDPR) is

MD Product+Service UG (limited liability)

Werkstättenstraße 4
DE-04319 Leipzig
Tel.: +49 341 65 86 0939

2. Collection and use of your data

The scope and type of collection and use of your data differs depending on whether you visit our website only to retrieve information or to make use of the services we offer.

If we use contracted service providers for individual functions of our website or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We have, of course, carefully selected these service providers. Otherwise, your data will only be passed on to other third parties if we are legally obliged to do so.

3. Data security

We also use technical and organizational security measures to protect personal data that is collected or generated, in particular against accidental or intentional manipulation, loss, destruction, or attacks by unauthorized persons. Our security measures are continuously improved in line with technological developments.

For example, this website uses TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.

4. Data collection when visiting our website

When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

– Our visited website

– Date and time at the time of access

– Amount of data sent in bytes

– Source/reference from which you accessed the site

– Browser used

– Operating system used

– IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will only be passed on or used in any other way as described below. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

5. Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.

Cookies are used, for example, to simplify the ordering process by storing settings and to enable you to shop conveniently (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the performance of the contract, in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit, or in accordance with Art. 6 (1) (a) GDPR as a result of your consent.

We may work with advertising partners who help us make our website more interesting for you. For this purpose, non-essential cookies from partner companies (third-party cookies) are also stored on your hard drive when you visit our website. If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the following paragraphs.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Revoking cookie settings

Please note that if you do not accept cookies, the functionality of our website may be limited.

6. Contacting us / Communication

a. Contacting us, communication

When you contact us (e.g. via contact form or email), personal data is collected. The data collected in the case of a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

b. Data processing when opening a customer account and for contract processing

In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of executing a contract or opening a customer account. The data that is collected can be seen in the respective input forms. Your customer account can be deleted at any time by sending a message to the above address of the controller. We store and use the data you provide for contract processing. After complete execution of the contract or deletion of your customer account, your data will be blocked in accordance with tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use your data in accordance with the law, about which we will inform you accordingly below.

7. Comment function

If we offer a comment function on our website, in addition to your comment, information about the time the comment was created and the commenter name you chose will also be stored and published on the website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons and in the event that the data subject violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you in the event that a third party objects to your published content as illegal. The legal basis for the storage of your data is Art. 6 (1) lit. b and f GDPR. The comment function serves to evaluate our services and products through customer experiences for other customers as well as those interested in our products. We reserve the right to review comments before publication and, if necessary, to delete parts or all of them if they contain, for example, defamatory content of any kind, intentions to advertise other products or websites, or other immoral comments, as well as if they are reported as illegal by third parties.

8. Direct advertising

a) Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you regular information about our offers. The only mandatory information required to send you the newsletter is your email address. The provision of any further data is voluntary and will be used to address you personally. We use the double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you agree to receive the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending us a message. After you unsubscribe, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

In order to be able to design the newsletter in a way that is meaningful for you in terms of content, we use the preferences collected on the basis of a pseudonymous user profile and combine your email address with the user profile for the sole purpose of sending you a personalized newsletter. No further evaluation or use takes place.

b) Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods, products, or services from our range by email. In accordance with Section 7 (3) UWG, we do not need to obtain your separate consent for this. Data processing in this regard is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with effect for the future by notifying us. You will only incur transmission costs at the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

c) Advertising by post

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address, and—if we have received this additional information from you within the scope of the contractual relationship – your title, academic degree, year of birth, and your professional, industry, or business designation in accordance with Art. 6 (1) lit. f GDPR and use it to send you interesting offers and information about our products by post. You can object to the storage and use of your data for this purpose at any time by sending us a message to that effect.

d) Review reminder

We may use your email address to send you a one-time reminder to submit a review of your order for the review system we use, provided that you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time by sending us a message.

9. Order and returns processing

a) Cooperation with service providers

To process your order, we work with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company responsible for delivery within the scope of contract processing, insofar as this is necessary for the (return) delivery of the goods. In the event of a complaint about technical equipment, your device may be forwarded to a service partner. The transfer is carried out for the purpose of fulfilling legal or contractual obligations arising from the purchase contract, Art. 6 (1) (b) GDPR, and for the purpose of our interest in effective error checking and correction, Art. 6 (1) (f) GDPR.

We pass on your payment details to the commissioned credit institution as part of the payment process, insofar as this is necessary for the payment process. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) lit. b GDPR.

In order to fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name and delivery address to a shipping partner selected by us exclusively for the purpose of delivering goods. It is now common practice to provide customers with comprehensive information about the status of their delivery (shipment tracking), thereby giving them the opportunity to grant permission for delivery, for example. For this purpose, we also pass on your email address and, if applicable, your telephone number to the service providers in accordance with Art. 6 para. 1 lit. f GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or to announce the delivery. If you do not wish this, please inform us before completing your order (contact details under section 1 of this declaration) or select an alternative service provider.

b) Use of payment service providers

> PayPal

If you select the “PayPal” payment method, payment will be processed by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: “PayPal”), to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 (1) lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider PayPal and only to the extent necessary for this purpose.

You can find further information about PayPal's privacy policy at the following Internet address: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

> Credit card

If you select the “credit card” payment method, payment will be processed by the payment service provider Stripe, Inc. ; 510 Townsend Street; San Francisco, CA 94103, USA (hereinafter: “Stripe”), to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 (1) lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe and only to the extent necessary for this purpose.

Further information about Stripe's terms of use can be found at the following Internet address: https://stripe.com/de/privacy.

10. Social media links

Our websites may contain links to various social media platforms with the corresponding logos. These are not social media plugins, but merely links to our offerings within these media. If you click on one of these links, your IP address will generally be transmitted to the operators of the various platforms. If you use one of these services and are also logged in with your specific account, information about your surfing behavior may also be collected by the social media operators. The transmission of your IP address to the operators of the websites you visit is technically necessary and applies to all websites.

11. Competitions

www.mamba.net may hold special competitions at irregular intervals. In connection with competitions, we will use your personal data to notify you of any winnings. You can find more detailed information about competitions in the terms and conditions of the respective competition.

12. Your rights

Overview of the rights of data subjects (your rights) in connection with data processing within our websites in accordance with the applicable data protection regulations.

a) Right to information

You have the right to obtain information at any time about your stored personal data, its origin and recipients, and the purpose of data processing.

b) Right to correction

You have the right to correct your stored data at any time. If you notice any discrepancies, you can also correct your data yourself in your customer account.

c) Right to erasure/blocking

You have the right to have your stored data erased or blocked for further processing at any time if we are obliged to retain your data (e.g. invoices) due to legal retention obligations; see also Restriction of data processing.

d) Right to restriction of data processing

You have the right to restrict data processing

– if you dispute the accuracy of your data and cannot correct it yourself;

– if the processing is unlawful, but you do not wish to have it deleted;

– if we, as the controller, no longer need your data, but you need it to assert, exercise, or defend legal claims; or

– if you have objected to data processing and it is not yet clear whether our legitimate reasons for further data processing outweigh your reasons for objection.

e) Right to object to processing

If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation affects the permissibility of the processing of your personal data after you have notified us of it.

If we send you direct advertising (e.g., newsletters), you have the right to object to this data processing at any time. You will be additionally informed of your right to object in the context of your consent and will be able to exercise this right easily by technical means (e.g., opt-out link in a newsletter); this also applies to any profiling that may be directly related to direct advertising.

If we ever use your data for purposes other than ordering in the web shop on the basis of a balancing of interests (in principle, no), you have the right to object to this data processing at any time for reasons arising from your particular situation. If such data processing ever occurs, we will inform you immediately.

This also applies to possible pseudonymized or anonymized data processing for statistical purposes. Therefore, you can also object to any web analysis technology we use, including with an opt-out cookie; see the relevant chapter.

f) Right to data portability

If you wish, we will provide you with the data you have personally provided to us in a structured, commonly used, and machine-readable format and/or transfer it to another controller (e.g., another web shop), the latter to the extent technically possible.

g) Right to lodge a complaint with the supervisory authorities

You have the right to lodge a complaint with the supervisory authority responsible for data protection at any time.

h) Right to withdraw consent

If you give us your consent for a specific data processing operation, you can withdraw this consent at any time. In principle, we only require consent in special cases, e.g. when sending newsletters.

13. Duration of storage of personal data

The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax law retention periods). After the expiry of the retention period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment of the contract or the initiation of a contract and/or we no longer have a legitimate interest in its further storage.

14. Communication by email

When communicating by email, we cannot guarantee complete data security, so we recommend that you send information requiring a high level of confidentiality by post.