Skip to Content

 Free shipping in Germany

Multi-pair discount from 3 pairs

Skip to content

HOLIES / Legal

Privacy Policy

holies-club.com

This Privacy Policy explains how personal data is processed when you visit the website holies-club.com, when you make enquiries, and when you place orders in the HOLIES online shop.

1 Controller

Mohammed Abbas
Hermeskeiler Str. 24
50935 Köln
Germany
Telephone: 01520 480610
Email: info@holies-club.com

2 Website and Hosting

For the website, customer accounts and order processing, we use the Odoo software. The Odoo instance is operated by Pandaloop GmbH on a server rented from netcup GmbH. According to the operator, the servers and backup copies are located in Germany; administrative access takes place from Germany. Pandaloop GmbH processes the data on our behalf as a processor under Art. 28 GDPR.

Email: Our email mailboxes are operated on our behalf by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. This is based on the data processing agreement under Art. 28 GDPR that forms part of Hostinger's terms of service. Hostinger uses sub-processors, including outside the European Economic Area; such transfers are covered by the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914).

The processing serves to provide and secure the online shop. The legal basis is Art. 6(1)(f) GDPR. Where the processing is necessary for an order or a customer account, Art. 6(1)(b) GDPR applies.

3 Contact and Club Enquiries

If you contact us by email or via a form, we process your details in order to handle your enquiry. This includes the contact details you provide and the content of your message. For club enquiries, vereine.info@holies-club.com is also available.

If your enquiry relates to a contract or pre-contractual measures, the processing is based on Art. 6(1)(b) GDPR. We handle other enquiries on the basis of our legitimate interest in responding to them under Art. 6(1)(f) GDPR.

4 Customer Account and Orders

You can order as a guest or use a customer account. To process an order, we process in particular your name, your billing and delivery address, your email address, the items ordered and the payment and transaction information required.

If you have a customer account, we additionally process the details required to log in to and manage the account. The legal basis is Art. 6(1)(b) GDPR. Details required for the order and delivery must be provided so that we can perform the contract.

Online withdrawal: If you withdraw from the contract via “Withdraw from contract here”, we process your name, your email address, your details on the order and the time of receipt in order to handle the withdrawal and to send you the acknowledgement of receipt required by law. The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 356a of the German Civil Code (BGB) and Art. 6(1)(b) GDPR. We store the details of your withdrawal until the end of the regular limitation period of three years (Sections 195, 199 German Civil Code), calculated from the end of the year in which the reversal was completed, in order to be able to prove claims arising from the reversal (Art. 6(1)(f) GDPR). Where they form part of documents that must be retained for tax purposes, the periods in Section 6 apply.

5 Payment and Shipping

For payment processing, we use Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands. The payment and order data required for the respective payment transaction are transmitted to Mollie. Our transmission serves the performance of the contract under Art. 6(1)(b) GDPR. Mollie processes payment processing data as an independent controller. Further information: https://www.mollie.com/legal/privacy

If you pay with PayPal, Apple Pay or Google Pay, the respective provider also processes your payment data under its own responsibility; its privacy notices apply.

Shipping is handled via Sendcloud and DHL. We transmit the details necessary for delivery, in particular name and delivery address as well as required shipping data and, where required for shipment notifications, your email address. The legal basis is Art. 6(1)(b) GDPR.

Cookies and External Services

We only use technically necessary cookies (Section 25(2) No. 2 TDDDG): “session_id” for the shopping cart and login, stored for up to 7 days (technically an expiry date of up to one year is also set; the shorter period applies), and “frontend_lang” for the selected language, stored for up to one year. No consent is required for this. When you pay, we redirect you to Mollie; their information applies there.

6 Retention and Deletion

Under Section 147(1) and (3) of the German Fiscal Code, we are required to retain books, records and annual financial statements for ten years (para. 1 No. 1), accounting vouchers such as invoices for eight years (para. 1 No. 4) and business letters received and sent for six years (para. 1 Nos. 2, 3); the periods begin at the end of the calendar year (para. 4). In accordance with our internal business retention rule, we retain invoices and order documents for up to ten years. The period begins at the end of the calendar year in which the invoice was issued or the order was completed, respectively.

We delete general enquiries and emails after final processing, unless statutory retention obligations or evidentiary purposes that continue to be necessary prevent this. Messages that are themselves business records subject to retention obligations are treated in accordance with the rules applicable to them.

Otherwise, we store personal data only for as long as this is necessary for the respective purpose or statutory obligations require storage. Art. 6(1)(c) GDPR applies to storage required by law. Where data remains necessary for the establishment, exercise or defence of legal claims, Art. 6(1)(f) GDPR applies.

7 Your Data Protection Rights

Subject to the statutory requirements, you have the right of access to your data and the right to rectification, erasure, restriction of processing and data portability. You can withdraw consent you have given at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Where processing is based on Art. 6(1)(f) GDPR, you can object on grounds relating to your particular situation. Where personal data is processed for direct marketing, you can object to this processing at any time.

You can lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, your place of work or the place of the alleged infringement. To exercise your rights against HOLIES, please contact info@holies-club.com.