The Minichamps GmbH & Co. KG (in the following „Minichamps“ or „we“) takes the protection of your personal data very seriously. We herewith inform you in detail, which kind of data we ask for and use on www.minichamps.de.

1. Responsible Institution and Contact
Responsible Institution according to the Right of Protection of Privacy is:
Minichamps GmbH & Co. KG
Charlottenburger Allee 49
D-52068 Aachen
Germany
E-mail: datenschutz@paulsmodelart.de
Phone: +49-(0)241-9672 300
Fax: +49-(0)241-9672499

2. Your Account
An account on www.minichamps.de allows you to present your collection in a virtual showroom, to drive a wish list, manage your favourite retailers and requests for availability as well as using all other features at www.minichamps.de.

By opening an account on www.minichamps.de we collect the information requested with the opening form. Data marked with a star are mandatory for account setup (especially first and surname, address, e-mail address). All other information are voluntary. By entering your birth date you allow us to provide you with special birthday greetings, assuming you are subscribed to our newsletter.

Setting up the account you can also select whether you want to make your showroom public, whether you want to attend the choice „showroom of the day“ and whether you agree that other users get in contact with you directly. Getting in contact with other users you will talk to them directly, without Minichamps to save the contents. Those features can also be deleted at a later stage.

If you mention your information of interest like brands, scales, year of construction etc., we can show you a randomly chosen list of models, which meet those criteria. These data are voluntary and you can change them at any time. In case you do not mention any interests, products will be assigned randomly.

3. Order
Placing an order you ask us to forward your sales offer to the according retailer, who – by accepting your order – will become your direct contract partner. You will get the retailer’s name during the order process and he will provide you with the requested goods after closing the sales contract. For this reason we will forward your data to the selected cooperation partner and, if any, to a freight forwarding company. Both, the cooperation partner as well as the freight forwarding company will use your private data independently to handle and deliver your order at the best way.

These data include necessary information for your order’s processing, delivery and invoicing (first and surname, address, e-mail address), added with details of the requested products (item number, price, quantity, shipping costs) and finally information regarding the chosen payment method (e. g. wire transfer, credit card). Personal data regarding banking or credit card accounts as well as credit card data will not be transferred.

4. Payment
For payment we will not ask for or save any payments information like credit card number or banking account details. You will pass these data only to the payment service provider, who takes care of your payment and is subjected to special safety requirements. The payment service provider will do a security check with the help of transaction criteria to prevent difficulties with payment processing as well as to avoid fraud cases.

As an exception we save a so-called pseudo-card number by payments with credit card: To make it more comfortable for you, that you need not to enter your credit card number with every payment process, we save a deriving pseudo-card number with your account. This pseudo-card number allows the payment service provider to process payments ordered via your MINICHAMPS Market Place account.

All payments of the MINICHAMPS Market place will be processed by the payment service provider Heidelberger Payment GmbH. The Heidelberger Payment GmbH is a payment institution according to the Payment Supervision Law (ZAG), which is also registered at the Federal Financial Supervisory Authority (BaFin), Graurheindorfer Str. 108, 53117 Bonn, Germany (Registration number 122914):
Heidelberger Payment GmbH
Gaisbergstr. 11-13
69115 Heidelberg
Germany
E-mail: info@heidelpay.de

To process payments by credit card the Heidelberger Payment GmbH has a cooperation with the acquirer:
HUELLEMANN & STRAUSS ONLINESERVICES S.A.r.l.
1, Place du March
L-6755 Grevenmacher
E-mail: info@hso-services.com

5. Usage of Cookies
Visiting our websites your browser will set first (from the domain www.minichamps.de) as well as third party cookies (e. g. provider of social networks). Cookies are text files, which can be used for the identification of your browser. Using first party cookies allows us to make our website more comfortable for you, e. g. default setting of language or functionality of shopping cart. Cookies can only be used from the domain, which has initially set them. As a result we only sort out first party, but no third party cookies. As session cookies our first party cookies are limited to the single browser session. By closing the browser or longer stage of inactivity they will be deleted. We do not have any influence on usage and safety of third party cookies. You will find closer information on that within the following paragraphs of Social Plugins and Google Analytics.

Your browser allows to configurate the handling of cookies, which means disable their storing or delete them by closing the browser. Please get in contact with your browser’s provider to learn more about handling with its cookies. In addition there are also third-party suppliers, who provide extensions for often used browsers. Please note, that there might be some limitations of functionalities, which are not able to run due to disabled cookies.

6. Usage of Social-Plugins
On our websites we are offering plug-ins of different social networks. The plug-ins of facebook and Google+ are directly embedded. Further plug-ins are provided by AddThis. Provider for those services are:
• facebook: facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
• Google+: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• AddThis: Clearspring Technologies, Inc.1595 Spring Hill Rd, Suite 300, Vienna, VA 22182, USA

To present these plug-ins on our website your browser starts them directly on the server of the single provider. To do so, the IP address of your internet access respectively of your used periphery will be transferred to the according provider as well as the information, on which website you are working with the mentioned plug-ins. Furthermore the social network is able to set network cookies within your browser.

Being logged into the social network by requesting the plug-in, the provider is able to match your personal data with the according social network. Using the plug-in features (e. g. click on „I like it“ or the „+1“ button, do a comment) also these information will be added to your social network account. To avoid this link of information with your social network user account, please log off on the social network before visiting our websites. This may result that you are not or only partially able to use the plug-in features.

Closer information about ascertainment and use of data by the plug-in provider are available on:

• facebook: http://www.facebook.com/about/privacy/
as well as http://developers.facebook.com/docs/plugins/
• Google+: https://www.google.de/intl/de/policies/privacy/
• AddThis: http://www.addthis.com/privacy

Please inform about possibilities of adapting the data protection settings as well as organizing use of cookies at your browser’s provider. In addition there are also third-party suppliers offering extensions to organize the usage of cookies as well as to avoid behaviour-based advertisements. AddThis offers an Opt-Out-Possibility: http://www.addthis.com/privacy/opt-out

7. Google Analytics
This website uses the Google Inc. („Google“) web analysis service Google Analytics. Google Analytics uses so-called „Cookies“, text files, which are recorded on your computer and allow an analysis of your usage of this website. These by cookies generated information about your usage of the website are as a rule transferred to and saved on an US Google server. If the anonymisation on this website is enabled, Google will shorten your IP address within states of the European Union as well as in other countries occupied by the Agreement of European Economic Area. Only in exceptional cases your complete IP address will be transferred to an US Google server before being shortened. On behalf of this website’s provider Google will use these information to analyse the usage of the website, to set up reports about the activities on the site as well as to render further services regarding the general website and internet usage. The IP address, which your browser will forward with the help of Google Analytics, will not be merged with other Google data. You can protect against filing of cookies by certain settings of your browser software. Please note that this may result in restricted use of functionalities on this website. Another possibility to avoid the transfer of by cookies generated data regarding your usage of the website (including your IP address) as well as processing these data is to download and install the following browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de

We use Google Analytics for the needs-based design and continuous optimization of our website. In addition, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are deemed to be justified within the meaning of Art. 6 para. 1 sentence 1 lit. f DSGVO.

Google fonts:
For uniform presentation of fonts Google web fonts are used on our website. When you visit a page, your browser loads the required fonts from Google into your browser cache to correctly display text and fonts. As a rule, your IP address and any other information will be transmitted to a Google server in the USA and stored there. As a result, Google learns that our website has been accessed via your IP address. More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://www.google.com/intl/en/policies/privacy/. .
Unless web fonts are supported by your browser, a default font of your computer will be used. The use of Google Web Fonts is in the interest of a consistent and attractive design of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

8. Pseudonymised User Profile
As permitted by law we are allowed to author and analyse pseudonymised user profiles for purposes of advertising, market research and user-friendly configuration of our website, provided that you have not exercised your right to contradict the usage of your data.

9. Newsletter
If ordering we are happy to provide you with our newsletter. To do so we collect and use your e-mail address after your express affirmation. You can recall this acceptance within the contact details at any time. You can also unsubscribe from the newsletter in the menu „Newsletter“, on your account or by clicking on the unsubscribe button within the newsletter itself.

For the newsletter distribution we use MailChimp, a service of The Rocket Science Group LLC, Georgia / USA. Art. 28 (3) DSGVO. The data processing is subject to the provisions of the EU / US Privacy Shield Framework.

10. Your Rights of withdrawal and Objection
As provided by law we will ask for your express approval to use your personal data. You can withdraw from your approval with future effect at any time. Please use the contact data provided with this Data Privacy Statement.

In case of legal requirements we are allowed to use your data for advertising, market or attitude research purposes without your express affirmation. You can withdraw your data’s use for advertising, market or attitude purposes at any time. Please use the contact data provided with § 1 of this Data Privacy Statement.

For technical reasons a withdraw or objection implementation will take some time, where you may receive further notices from us.

11. Contact form
Providing information by getting in contact with us via our contact form, by mail or in any other way we will use and save these data to take care of your request.

12. Recording of access to log files
For technical reasons we will record the following information with each access to our internet program:
• Name of called file
• Date and Time of call
• Transferred data volume
• Information, whether call was successful
• Used IP address for the call

We are using these recorded data to recognize, reduce or eliminate technical interruptions or failues, to realize attacks against our internet’s technical infrastructure as well as to identify and fend of illegal misuse, which will also protect your personal data. These log files will be deleted after 7 days. In suspected cases we reserve the right to keep extracts of those information till final solving of misuse items.

13. Other storage and transmisson of personal data
Apart from that we will provide your personal data to a third party in case of legal, governmental or judical regulations or – after your previous information and affirmation – as the legally case may be to assume our rights and demands or for criminal proceedings.

14. Data Safety
To protect your data we take effective technical and organisational measures, which are regularly checked and – as the case may be – optimized. So the transfer of personal data from www.minichamps.de is encrypted according to the SSL standard.

15. Links to other websites
Insofar as you can enter other websites from www.minichamps.de please note that we are not responsible for the data safety regulation on these sites. You will get closer information from the according companies.

16. Right to information, correction, blocking, deletion
Within the framework of the valid legal regulations (article 15 EU-DSGVO in connection with §34 BDSG) you have at any time the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and possibly a right on rectification (Article 16 EU-DSGVO), blocking (Article 18 EU-DSGVO) or deletion (Article 17 EU-DSGVO in conjunction with §35 BDSG) of this data. You may object to the use of your data for advertising and market research purposes at any time.
You can exercise these rights towards Minichamps GmbH & Co. KG by contacting us directly via info@minichamps.de. In addition, you can also send your request in writing to the o.a. Address address.

Right to data portability
You have the right to have your data processed by us in an automated manner or in a third-party machine-readable format. If you require the direct transfer of data to another person in charge, this will only be done to the extent technically feasible.

17. Change of this Data Privacy Statement
There might be necessary changes of this Data Privacy Statement for technical reasons, to further develop our website program or to optimize our service for you. We therefore kindly ask you to check this Data Privacy Statement from time to time. In case we needyou’re your confirmation for those changes, we will inform you accordingly, timely before those changes coming into effect.

Aachen, May 25th, 2018