Privacy policy

Please note: this is a courtesy translation. Only the German version of this document is legally binding.

The processing of personal data, such as the name, address, email address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection provisions applicable to Steffen Klein.

This privacy policy applies to the website mallorca-moebel.de as well as the associated domains muebles-baleares.es, balear-cargo.de and balear-cargo.es.

1. Definitions

We use the terms of the GDPR – in particular personal data, data subject, processing, controller, processor, recipient, third party and consent – with the meaning legally defined in Art. 4 GDPR.

2. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Steffen Klein (sole proprietorship), Alt Burgholzhausen 9, 61381 Friedrichsdorf, Germany

Phone: +49 172 9595927 · Email: mail@steffenklein.org · Website: mallorca-moebel.de

3. Cookies

Our websites may use cookies in order to make use technically possible and more convenient. You can prevent the setting of cookies at any time via your browser settings or delete cookies that have already been set. If cookies are deactivated, individual functions of our site may not be fully usable.

4. Collection of general data and information

Each time the website is accessed, general data and information is recorded in server log files (e.g. browser type, operating system, referrer, time of access, shortened IP address). We need this data in order to deliver content correctly, to ensure the security of our systems and, in the event of an attack, to provide law enforcement authorities with the necessary information. Any analysis is anonymous and does not allow conclusions to be drawn about you.

5. Contact options and communication

a) Email and contact form: If a data subject contacts the controller by email or via a contact form, the personal data transmitted is stored automatically. Such data transmitted on a voluntary basis is stored for the purposes of processing the request or contacting the data subject.

b) WhatsApp communication: For quick coordination (e.g. sending photos of items) we offer communication via WhatsApp. Please note that the terms of use and privacy notices of WhatsApp (WhatsApp Ireland Limited) apply when using this service. Communication is end-to-end encrypted, but metadata may be processed by the provider.

6. Data processing for logistics (own-account transport)

In order to fulfil our contractual obligations within the scope of own-account transport, we process the delivery address and, where applicable, the telephone number of the data subject for route planning and personal delivery of the goods by our in-house logistics (balear-cargo.de / balear-cargo.es). Data is not passed on to external forwarders unless this is strictly necessary for the performance of the contract.

7. Compliance with tax obligations (Spain / IVA)

Due to the permanent establishment in Spain, the controller is obliged to pay Spanish value added tax (IVA). Invoice-relevant data is processed for this purpose in accordance with Art. 6 (1)(c) GDPR and transmitted to the competent tax authorities and, where applicable, to tax advisors.

8. Routine erasure and blocking of personal data

We process and store personal data only for the period necessary to achieve the purpose of storage or where statutory retention periods require it. After the period expires, the data is routinely blocked or erased.

9. Rights of the data subject

You have the right to confirmation, information, rectification, erasure, restriction of processing, data portability, objection to processing and the right to withdraw consent given at any time. You also have the right to lodge a complaint with a supervisory authority. Please use the contact details above at any time.

10. Legal basis for processing

Art. 6 (1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent. If processing is necessary for the performance of a contract (e.g. delivery of goods by own-account transport), processing is based on Art. 6 (1)(b) GDPR. If our company is subject to a legal obligation (e.g. Spanish IVA), processing is based on Art. 6 (1)(c) GDPR. Finally, processing operations may be based on Art. 6 (1)(f) GDPR (protection of legitimate interests).

11. Legitimate interests in processing

Where processing is based on Article 6 (1)(f) GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of the owner and the employees.

12. Duration of storage

The criterion for the duration of storage is the respective statutory retention period (e.g. 10 years under German commercial and tax law).

13. Statutory or contractual requirements to provide data

We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information about the contractual partner). Failure to provide the data would mean that a contract could not be concluded.

14. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

Note on the generator

This privacy policy was created with the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, acting as external data protection officer in Bremen, in cooperation with data protection lawyer Christian Solmecke.