Privacy policy

We manage our websites in accordance with the principles set out below: We undertake to comply with the legal provisions on data protection and endeavour to always take into account the principles of data avoidance and data minimisation.

1. Name and address of the person responsible

The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Begadi GmbH
Managing Directors Benjamin and Gabriel Digeser
Dietinger Street 23
78661 Dietingen - Böhringen
Telephone: +49 (0) 7404 - 92001 - 10
Mobile phone: +49 (0) 7404 - 92001 - 12
E-mail: info@begadi.com
Web: www.begadi.com

2. Explanations of terms

We have designed our data protection declaration according to the principles of clarity and transparency. However, if there are any ambiguities regarding the use of various terms, the relevant definitions can be found here.

3. Legal basis for the processing of personal data

a) Processing of personal data in accordance with the GDPR - We only process your personal data, such as your first and last name, your e-mail address and IP address, etc., if there is a legal basis for doing so. The following regulations in particular come into consideration here according to the General Data Protection Regulation:

Art. 6 para. 1 p. 1 lit. a DSGVO: The data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes.
Art. 6 para. 1 p. 1 lit. b DSGVO: Processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request.
Art. 6 para. 1 sentence 1 lit. c DSGVO: Processing is necessary for compliance with a legal obligation to which the controller is subject.
Art. 6 para. 1 p. 1 lit. d DSGVO: Processing is necessary in order to protect the vital interests of the data subject or another natural person
Art. 6 (1) p. 1 lit. e DSGVO: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
Article 6(1)(1)(f) DSGVO: processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

However, we will always point out to you again at the respective points in this data protection declaration on which legal basis the processing of your personal data is based.

b) Consent of the legal guardian according to Art. 8 Para. 1 Sentence 2 Alt. 2 DSGVO - A legal guardian must consent to all data processing within the framework of this website for which the consent of a minor who has not yet reached the age of 16 is required. Information on the individual data processing operations, their purposes and the categories of data concerned, for which the consent of the person concerned is required, can be found in the data protection declaration. You can revoke your consent at any time by sending the revocation in text form to the contact details of the data controller. The processing remains lawful until the revocation.

c) Processing of information pursuant to Section 25 (1) TTDSG - We also process information pursuant to Section 25 (1) TTDSG by storing information on your terminal equipment or accessing information that is already stored on your terminal equipment. This can be both personal information and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment is any equipment connected directly or indirectly to the interface of a public telecommunication network for sending, processing or receiving messages, § 2 para. 2 no. 6 TTDSG. As a rule, we process this information on the basis of your consent, Section 25 (1) TTDSG.

Insofar as an exception according to § 25 para. 2 no. 1 and no. 2 TTDSG is given, we do not require your consent. Such an exception is given if we only access or store the information in order to transmit a message via a public telecommunications network or if this is absolutely necessary in order for us to provide a telemedia service that you have expressly requested. You may withdraw your consent at any time. We inform you that the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

4. Passing on personal data

The passing on of personal data is also processing in the sense of the previous point 3. However, we would like to inform you again here separately about the subject of passing on data to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

We therefore only pass on data to third parties if there is a legal basis for the processing. For example, we share personal data with persons or companies that act as processors for us in accordance with Article 28 of the GDPR. A processor is anyone who processes personal data on our behalf - i.e. in particular in an instruction and control relationship with us.

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors to oblige them to comply with data protection regulations and thus provide comprehensive protection for your data.

5. Storage period and deletion

Your personal data will be deleted by us if it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

6. SSL Encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

7. Collection and storage of personal data as well as their type and purpose of use

a) External hosting - Our website is hosted by maxcluster GmbH, Lise-Meitner-Str. 1b, D-33104 Paderborn. For this reason, all personal data collected on our website is stored on the servers of our hoster, unless an external service of a third party is integrated. This may be the IP address, your e-mail address, communication data or similar. You can find out what specific personal data is involved in the individual functions and services explained by us below. If we use an external service of a third party, this will be made clear in the description of the respective service or tool.
The hoster only processes your data on our instructions and insofar as this is necessary to fulfil the services on the website. The hoster does not process the data for its own purposes. We have concluded an order processing contract with the hoster.

b) Shop system - To offer our goods we use the shop system Adobe Commerce of Adobe Systems Software Ireland Limited. 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland.
The data you provide will therefore also be processed by our shop provider as part of the operation of the shop system. In addition, further cookies may be set by the shop system.
For this reason, we have concluded an order data processing contract with them.
Further information on data protection can be found at:
https://www.adobe.com/de/privacy.html

c) When visiting the website - When you call up our website, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:

IP address of the requesting computer, Date and time of access, Name and URL of the file accessed, website from which the access is made (referrer URL), browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data is processed by us for the following purposes:
Ensuring a smooth connection set-up of the website,
Ensuring a comfortable use of our website,
evaluating system security and stability, and
for other administrative purposes.
Data that allow a conclusion to your person, such as the IP address, are deleted after 7 days at the latest. If we store the data beyond this period, this data is pseudonymised so that it can no longer be assigned to you. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

d) Contractual relationship
aa) Conclusion of contract - In the context of the establishment of the contractual relationship, only the personal data that is absolutely necessary for the execution of the contract is processed in accordance with Art. 6 Para. 1 lit. b DSGVO as mandatory data, which is marked with an asterisk.
If you provide additional voluntary information, this will only be processed on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit a DSGVO. We use this voluntary information to offer a customer-friendly service and to constantly improve it.
The data necessary for the dispatch of our goods (name, address, e-mail address, telephone number if required due to shipping goods) is passed on to the corresponding shipping service provider for notification/coordination for the delivery of the goods and for the delivery of the goods.

bb) Customer account - You have the option of creating a customer account with us. For this purpose, in addition to your personal data for the processing of the contract, your other voluntary details and the purchases you have made with us in the past will be stored and processed. You can access these at any time and thus obtain an overview of the purchases you have made with us. This data is used so that you can easily log in with your log-in data for your next purchase. It is also intended to help you control your purchasing activities. The legal basis is based on the consent you have given us in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO. You have the option to change or delete your data in the customer account at any time and also to delete the account in its entirety. If you make use of this function, your customer account with all the data it contains will be deleted immediately.

cc) Age verification - When purchasing some products on our website, age verification is required by law. For this reason, we collect the data required for this purpose. We use the service provider insic GmbH, Brookweg 6 in 22941 Jersbek to carry out the age verification. We have concluded an order processing contract with this company.
The processing of your data is based on Art. 6 para. 1 p. 1 lit. c DSGVO.

cc) Passing on data for shipping - We pass on the data necessary for shipping our goods (name, address, e-mail address, telephone number if required due to shipping goods) to the corresponding shipping service provider for notification/coordination for delivery of the goods and for delivery of the goods. The legal basis for the disclosure results from Art. 6 para. 1 p. 1 lit. b DSGVO.

DHL Paket GmbH, Sträßchensweg 10, PLZ/Ort: 53113 Bonn, Fon: +49/ (0) 228/ 18 20, E-Mail: impressum.paket[at]dhl.com; https://www.dhl.de/de/toolbar/footer/datenschutz.html

DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Deutschland, info@dpd.com, Fon. 06021 843-0; https://www.dpd.com/de/siteutilities/data_protection

UPS Europa SA, Ave Ariane 5, Brüssel, B-1200, Belgien: https://www.ups.com/de/de/help-center/legal-terms-conditions/privacy-notice.page?

dd) Transfer of data when using online payment service providers
If you decide to pay with one of the online payment service providers offered by us as part of your order process, your contact data will be transmitted to them as part of the order triggered in this way. The personal data transmitted to the online payment service provider is usually your first name, surname, address, telephone number, IP address, e-mail address, or other data required for order processing, as well as data related to the order, such as the number of items, item number, invoice amount and taxes as a percentage, invoice information, etc. This transmission is necessary for processing your order.
This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship.
However, please note: Personal data may also be disclosed by the online payment service provider to service providers, subcontractors or other affiliated companies to the extent that this is necessary to fulfil the contractual obligations arising from your order or the personal data is to be processed on behalf.
Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transferred by PayPal to credit agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed. You can find out which credit agencies are involved and which data is generally collected, processed, stored and passed on by the respective provider in the respective data protection declarations of the providers:

Paypal - PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boule vard Royal, L-2449 Luxembourg under PayPal.

Sofortüberweisung - SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany
If you have any further questions about the use of your personal data, you can contact Sofortüberweisung by e-mail (datenschutz@sofort.com) or in writing (SOFORT GmbH, Datenschutz, Theresienhöhe 12, 80339 Munich, Germany).

Klarna - Klarna AB, business address Sveavägen 46, 111 34 Stockholm, Sweden
You can also obtain further information on data protection from Klarna directly:
- General information on data protection Klarna
- Privacy policy for Germany Klarna
- Privacy policy for Austria Klarna
You can obtain information about the personal data stored by Klarna at any time by contacting Datenschutz@klarna.de.

paydirect - paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, https://www.paydirekt.de/agb/index.html

ee) Credit card payment - If you choose to pay by credit card, we collect and process your personal data and forward it to the card-issuing institution for payment processing and to meet the legal requirements, such as for customer authentication in accordance with the EU Payment Services Directive PSD2.

This data is forwarded for payment processing pursuant to Art. 6 (1) sentence 1 lit. b) DSGVO and to fulfil our legal obligation to carry out strong customer authentication pursuant to Art. 6 (1) sentence 1 lit. c) DSGVO in conjunction with Directive EU 2015/2366 (PSD 2) or the Payment Services Supervision Act (Zahlungsdiensteaufsichtsgesetz - ZAG) for anti-money laundering and criminal prosecution.

The technical processing of the credit card payment is carried out by the payment service provider.
provider. This provider has been commissioned for the technical control of payment transactions including the implementation of the 3D Secure 2.0 procedure in accordance with Art. 28 DSGVO. Further recipients of the data are the banks involved (on the one hand the card-issuing bank - the issuer - and on the other hand the credit card-accepting bank of the merchant - the acquirer.

e) Contact form / e-mail contact - We provide you with a form on our website so that you have the opportunity to contact us at any time. In order to use the contact form, it is necessary to provide a name for a personal salutation and a valid e-mail address for contacting us, so that we know who the enquiry is from and can process it.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, as well as your IP address, will be processed in accordance with Art. 6 (1) sentence 1 lit. b and f DSGVO for the purpose of carrying out pre-contractual measures in response to your enquiry or for the exercise of our legitimate interest, namely to carry out our business activities.
You are also welcome to send us an email using the email address provided on our website. In this case, we will store and process your e-mail address and the information you provide in the e-mail in accordance with Art. 6 (1) sentence 1 lit. b and f DSGVO in order to process your message.
The enquiries and the associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.

f) Blog - If you would like to comment on a blog post, your first and last name as well as your email address will be collected and stored. The legal basis here is Article 6 (1) sentence 1 lit. f DSGVO for the exercise of legitimate interests, as the storage of this data is necessary for our security, as we can be prosecuted for illegal content on our website.
Other visitors to our website will be shown the data released by you as the author when you leave a comment.

10. Image, sound and video integration

a) YouTube - Our website uses the YouTube plugin, which is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and also integrates youTube within the framework of iFrame. If you activate the YouTube plugin or start the video during your visit, a connection is established to the YouTube servers and the YouTube server is informed which of our pages you have visited. This enables YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your member account before visiting our website.

You can find further information on the handling of user data in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.
By integrating YouTube, the Google Fonts are also dynamically reloaded by Google without being actively determined by the website operator or visitor. The integration of these web fonts takes place via a server call, usually a Google server in the USA. This may result in the following being transmitted to the server and stored by Google:
Name and version of the browser used
Website from which the request was initiated (referrer URL)
Operating system of your computer
Screen resolution of your computer
IP address of the requesting computer
Language settings of the browser or operating system used by the user

You can find more detailed information in Google's data protection information, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
The legal basis results from the consent you have given in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO. You can revoke your consent at any time by changing the cookie setting on our website.

11. Rights of the data subject

You have the following rights:
a) Information - In accordance with Art. 15 DSGVO, you have the right to request information about your personal data processed by us. This right of access includes the following information about:

the purposes of processing
the categories of personal data
the recipients or categories of recipients to whom your data have been or will be disclosed
the planned storage period or at least the criteria for determining the storage period
the existence of a right of rectification, erasure, restriction of processing or opposition
the existence of a right of appeal to a supervisory authority - the origin of your personal data, if it has not been collected by us
the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details.

b) Correction - In accordance with Art. 16 DSGVO, you have the right to have inaccurate or incomplete personal data stored by us corrected without delay.

c) Deletion - Pursuant to Art. 17 DSGVO, you have the right to demand that we delete your personal data without delay, insofar as further processing is not necessary for one of the following reasons:

the personal data are still necessary for the purposes for which they were collected or otherwise processed
to exercise the right to freedom of expression and information;
for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for
the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in section (a) is likely to make impossible or seriously prejudice the achievement of the purposes of such processing; or for the assertion, exercise or defence of legal claims.

d) Restriction of processing
In accordance with Art. 18 DSGVO, you may request the restriction of the processing of your personal data for one of the following reasons.
You dispute the accuracy of your personal data.
The processing is unlawful and you refuse the erasure of the personal data.
We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
You object to the processing in accordance with Art. 21 (1) DSGVO.

e) Notification - If you have requested rectification or erasure of your personal data or restriction of processing under Article 16, Article 17(1) and Article 18, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. You may request that we notify you of these recipients.
f) Transfer - You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You also have the right to request the transfer of this data to a third party if the processing was carried out with the help of automated procedures and is based on consent pursuant to Article 6 (1) sentence 1 lit. a or Article 9 (2) lit. a or on a contract pursuant to Article 6 (1) sentence 1 lit. b DSGVO.
g) Revocation - Pursuant to Article 7 (3) DSGVO, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.
h) Complaint - Pursuant to Article 77 of the GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR.
i) Objection - If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying the particular situation. If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to info@begadi.com.
j) Automated decision-making in individual cases, including profiling - You have the right not to be subjected to a decision based solely on automated processing - including profiling - which produces legal effects vis-à-vis you or similarly significantly affects you.

This does not apply if the decision
a) is necessary for the conclusion or performance of a contract between you and us,
b) is permissible on the basis of legal provisions of the Union or the Member States to which we are subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests; or
c) is done with your explicit consent.

However, these decisions must not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests. With regard to the cases mentioned in a) and c), we take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person from our side, to express your point of view and to contest the decision.

11. Change of the privacy policy

If we change the privacy policy, this will be indicated on the homepage and the registered customers will be informed.
Status, 24.05.2023