Welcome to our website and thank you for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with applicable personal data protection legislation, in particular the GDPR and our country-specific implementation laws. With this privacy policy, we provide comprehensive information about the processing of your personal data by Company Weplay Lernspiel GmbH and your rights.
Personal data is any information that makes it possible to identify a natural person. This includes, in particular, your name, date of birth, address, telephone number, email address and IP address.
Anonymous data is available if no personal reference to the individual/user can be made.
Responsible body and data protection officer
Address: | Weplay Lernspiel GmbH Nicolaus-Zech-Strasse 81 96450 Coburg Germany |
Contact information: | Telephone: +49 (0) 9561 596 35 13 Fax: +49 (0) 9561 596 35 14 E-Mail: info@weplay.de |
Contact info of the data protection officer:
privacy@weplay.de
Your rights as a data subject
We would first like to notify you of your rights as a data subject. These rights are set out in Articles 15 - 22 GDPR, and include:
To exercise these rights, please contact: privacy@weplay.de. The same applies if you have any questions regarding data processing in our company or when you withdraw your consent. You also have a right of appeal to the relevant data protection supervisory authority.
Right to object
Please note the following with respect to your right to object:
When we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing the reasons for such objection. This also applies to profiling insofar as it is associated with direct marketing. If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to: privacy@weplay.de. Should we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling based on these provisions. We will then cease to process your personal information unless we can demonstrate compelling legitimate grounds for processing such information that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims. |
The processing of your personal data complies with the provisions of the GDPR and all other applicable data protection regulations. Legal bases for data processing arise in particular from Art. 6 GDPR.
We use your data to initiate business, to fulfil contractual and legal obligations, to conduct the contractual relationship, to offer products and services and to consolidate customer relationships, which may include marketing and direct marketing. Particularly we process your data in order to fulfil your order, to create delivery notes, bills, transport documents or to track your delivery, the payment process, perhaps ongoing summary proceedings and in order to fulfil guarantee in cases of complaints and to reverse transaction of contracts.
Your consent also constitutes a legal basis for data processing. In this respect, we will inform you of the purposes of data processing and the right to withdraw your consent. If the consent also relates to the processing of special categories of personal data, we will explicitly notify you in the consent process.
Processing of special categories of personal data within the meaning of Art. 9 para. 1 GDPR may only take place where necessary on the grounds of legal regulations and there is no reason to assume that your legitimate interests should prevail to the exclusion of processing such data.
Data transfers / Disclosure to third parties
We will only transmit your data to third parties within the scope of given statutory provisions or based on consent. In all other cases, information will not be transferred to third parties unless we are obliged to do so owing to mandatory legal regulations (disclosure to external bodies, including the supervisory authorities or law enforcement authorities).
Data recipients / categories of recipients
In our organisation, we ensure that only individuals who are required to process the relevant data to fulfil their contractual and legal obligations are authorised to handle personal data.
In many cases, service providers assist our specialist departments to fulfil their tasks. The necessary data protection contract has been concluded with all service providers. Assisting service providers are the postal services DHL and DPD, PayPal as well as the banking house Max Flessa/Coburg for payment and Bürgel/Coburg for collection and creditworthiness check.
Transfers of personal data to third countries
A transfer of data to third countries (outside the European Union or the European Economic Area) shall only take place if required by law or if you have provided your consent for such a transfer.
We don't transfer your personal data to any service provider outside the European Economic Area.
Period of data storage
We store your data for as long as such is required for the relevant processing purposes. Please note that numerous retention statutory periods require that data must be stored for a specific period of time. This relates in particular to retention obligations for commercial or fiscal purposes (e.g. commercial code, tax code, etc.). The data will be routinely deleted after use unless a further period of retention is required.
We may also retain data if you have given us your permission to do so, or in the event of any legal disputes and we use the evidence within the statutory limitation period, which may be up to thirty years; the standard limitation period is three years.
Secure transfer of data
We implement the appropriate technical and organisational security measures to ensure the optimal protection of the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.
The data exchange to and from our website is encrypted. We provide https as a transfer protocol for our website, and always use the current encryption protocols. It is also possible to use alternative communication channels (e.g. surface mail).
Obligation to provide data
A range of personal data is required to establish, implement and terminate the obligation and the fulfilment of the relevant contractual and legal obligations. The same applies to the use of our website and the various functions we provide.
We have summarised the relevant details in the points below. In some cases, legal regulations require data to be collected or made available. Please note that it will not be possible to process your request or execute the underlying contractual obligation without this information.
Data categories, sources and origin of data
The data we process is defined by the relevant context: it depends on whether, for example, you place an order online or enter a request on our contact form.
Please note that we may also provide information at specific points for specific processing situations separately where appropriate, e.g. when making a contact request.
We collect and process the following data when you visit our website:
For reasons of technical security (in particular to safeguard against attempts to attack of our web server), this data is stored in accordance with Article 6 (1) lit f GDPR.
We collect and process the following data as part of a contact request:
We do not use purely automated processing to make decisions.
Cookies (Art. 6 para. 1 lit. a, f EU-GDPR, Section 25 para. 1, 2 TTDSG – The German Federal Law on Data Protection and the Protection of Privacy in Telecommunications and Telemedia)
On our website, we are using so-called cookies. Cookies use to make our content more user-friendly, effective and secure. Cookies are small text-files which are stored (locally) in your devices´ browser. Cookies are containing pseudonymous data only, in most cases even only anonymous data. Some cookies are persisting for a single browsing session (so-called session-cookies), others are active for a longer period of time (so-called persistent cookies, such as e.g. the ones used to save consent-settings, shopping cart, language settings). The latter kind of cookies is subject to auto-deletion after its pre-set expiration (usually 6 months).
Based on our legitimate interest (Art. 6 para. 1 lit. f GDPR), we are using technically required cookies, which are mandatory to operate the website as such and to operate it technically perfect. Additionally, and again without your consent, we use cookies which´s sole purpose is to store or access information for transmitting messages or to offer services you expressly request, Section 25 para. 2 TTDSG.
Besides cookies that are technically required, we do not use any further cookies.
Most browsers accept cookies automatically. However, you may deactivate, restrict or delete cookies manually by your browsers' settings or software-based. Should cookies be deactivated, our website may eventually not be used anymore or to a limited extent, only.
Please check also our information on cookies located in our privacy statements´ respective part on the single service using cookies.
Social Plugins
No social plug-ins are enabled on our website.
Social media links
You’ll find to social media services from Facebook and Instagram on our website. Links to the webpages of these social media providers are recognisable by the respective company logo. When you click on the links, you will be forwarded to our page on the various social media platforms. Clicking on these links creates a connection to the social media providers’ servers, which then receive the information that you have visited our website. Additional data are also transferred to the social media service, for example:
If you are already logged in to the social media site at the time the link is activated, the provider may be able to determine your user name and possibly even your real name from the data transferred and assign this information to your personal user account. To prevent this from happening, please make sure you are logged out of your account.
The social media providers' servers are located in the USA and other countries outside of the European Union. For this reason, data can also be processed by the social media provider in countries outside of the European Union. Please be aware that business in these countries are not subject to the same strict levels of data protection as those who are member states of the European Union.
Please also be aware that we have no influence on the scope, type and purpose of data processing carried out by these social media providers. Further information about the use of your data by the social media platforms embedded on our website can be found in the Privacy Policies of the respective social media provider.
Contact form / Contact via email (Art. 6 para. 1 lit. a, b GDPR)
A contact form is available on our website, which can be used to contact us electronically. If you write to us using the contact form, we will process the data you submitted in the contact form to respond to your queries and requests.
In so doing, we respect the principle of data minimisation and data avoidance, such that you only have to provide the information we require to contact you, which is your email address and the message field itself. Your IP address will also be processed for technical reasons and for legal protection. All other data is voluntary, and additional fields are optional (e.g. to provide a more detailed response to your questions).
If you contact us by email, we will process the personal information provided in the email solely for the purpose of processing your request.
Web shop (Art. 6 para. 1 lit. b GDPR)
We process the data provided by you within the scope of the order form solely to execute and fulfil the underlying contractual relationship, unless you agree to further use. The principle of data minimisation and data avoidance is observed here, as we only request data that is required to perform the contract or fulfil our contractual obligations (i.e. your name, address, email address and the payment data for the specific payment method you have chosen) or to collect data that is mandatory under the law.
Your IP address will also be processed for technical reasons and legal protection. If this data is not provided, we will have to decline the conclusion of the contract, as we cannot perform the contract or will be obliged to terminate an existing contract, where appropriate. You can of course provide additional data on a voluntary basis.
Registration / Customer account (Art. 6 para. 1 lit. a, b GDPR)
Users can provide personal data to enable them to register on our website. The advantage here is that you can, in particular, view your order history and save your data to use for your next order, without having to re-submit it.
Registration is therefore necessary to perform a contract (via our online shop) with you or required to implement pre-contractual measures, or possible if guest access is provided as an option.
The principle of data minimisation and data avoidance is observed here, as only the mandatory data fields required for registration are marked with an asterisk (*). This is e.g. the email address, password and password re-entry.
When ordering in our online shop, we also require the billing address information for the delivery (form of address, first name, last name, address). If the delivery address is different from the billing address, the delivery address details mentioned above must also be provided.
When you register on our website, the user’s IP address and the date and time of registration are also stored (technical background data). Activate the "Register now" to consent to the processing of your data.
Please note: We will encrypt the password you entered which will be stored with us. Our company employees cannot view this password and cannot therefore assist you if you forget it.
In this event, use the "Forgotten password" function, which will send you an automatically generated new password by email. No employee is authorised to request your password by telephone or in writing. Please never disclose your password should you receive such requests.
Upon completion of the registration process, your data will be stored with us for use in the protected customer area. When you log in to our website with your email address as your username and your password, this data will be made available to you on our website (e.g. for orders in our online shop). Completed orders can be tracked in the order history. You can specify changes to the billing or delivery address here.
Registered persons are free to amend/correct the billing or delivery address in the order history. You can also contact our customer service team, who will be happy to apply any changes / corrections. You can of course cancel or delete the registration or your customer account.
Payment systems (Art. 6 para. 1 lit. a, b GDPR), credit checks (Art. 6 para. 1 lit. f GDPR)
In our online shop you can select to pay on invoice, by SEPA transfer or PayPal. In order to proceed accordingly, the relevant payment data is collected to perform and process your order. The payment system we use implements SSL encryption to protect your data. Your IP address will also be processed for technical reasons and legal protection.
The principle of data minimisation and data avoidance is observed in a manner that you only submit the data we need to process the payment and therefore fulfil the contract or to collect the payment for which we are under a legal obligation.
We cannot fulfil the contract without this data, and we will therefore have to decline it.
Our payment system uses SSL-encryption to protect your data during transmission.
Note on invoice payment: We will carry out a credit check if you choose the invoice payment method in our online shop. The credit relevant data will be transmitted to Bürgel/Coburg in order to determine creditworthiness and the risk of payment default.
Note on PayPal: PayPal is a PayPal (Europe) S.à.r.l. et Cie, S.C.A company, 22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects “PayPal” as an option during the order process in our online shop, the data subject’s information will be automatically sent to "PayPal".
By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is generally a first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing.
Personal data associated with the relevant order is also necessary to execute the purchase contract. Details on data protection at PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev
Marketing purposes (Art. 6 para. 1 lit. f GDPR)
Weplay Lernspiel GmbH is keen to nurture the customer relationship with you and to send you information and offers about our products and especially novelties and special offers. We therefore process your data to send you the relevant information and offers via email.
You may object to the use of your personal data for the purpose of direct marketing at any time; this also applies to profiling insofar as it is associated with direct marketing. If you object, we will cease processing your personal information for this purpose. The objection can be made free of charge and informally without giving reasons and should be addressed in writing by e-mail to privacy@weplay.de or by post to Weplay Lernspiel GmbH, Nicolaus-Zech-Strasse 81, 96450 Coburg, Germany. |
Persons under the age of 16 may not submit personal data to us or give a declaration of consent without the authorisation of their legal guardian. We encourage parents and guardians to actively participate in the online activities and interests of their children.
Social media presence
We have a presence on a range of social media platforms to communicate with registered customers and interested parties and inform them of our offers.
Please be aware that using these platforms and their functions is at your own risk. This is especially the case when using interactive functions such as commenting, sharing and leaving reviews.
We also wish to inform you that your data may be processed outside of the European Union.
Your data may additionally be processed for market research and marketing reasons, meaning, for example, that a user profile may be created based on your usage and interests. As a result, advertising both on and external to the platforms may be activated, which supposedly correspond to your interests. In order for this to happen, cookies are usually saved on your computer. Independently, data that is not collected directly from your end devices may also be stored in the user profiles (especially if you are member of a platform and are logged in).
Moreover, we, as the provider of this information service, collect and process no data from your use of our services.
The processing of users’ personal data is based on our legitimate interest in effectively informing and communicating with users in accordance with Art. 6 para. 1 lit. f GDPR. If a provider asks for your consent to data processing (e.g. by ticking a box or by clicking “confirm”), then processing is lawful in accordance with Art. 6 para. 1 lit. a and Art. 7 GDPR.
Opting out
If you are a member of a social network and do not want your personal data to be collected through our website and linked to your membership data on the respective network, you must:
After logging in again, you will once again be recognised by the network as a specific user.
For more detailed information on how data is processed and how you can opt out, please visit the pages of the respective providers listed below.
If you would like to request information or exercise your rights as a user, this can be done most effectively directly with the providers themselves as only they have direct access to user data and can therefore take appropriate action and provide information. If you do have any problems, you can of course contact us.