Last updated: 12.02.2020
Our data usage policy explains how personal information is collected, used and disclosed by PepMelon, Eva Puskas (“PepMelon”) with respect to your access and use of the PepMelon’s website at www.pepmelon.com or any other PepMelon tool or service, including those accessible through websites maintained, in whole or in part, by PepMelon.
PepMelon operates www.pepmelon.com (the “Site”). This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site. We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy.
Information Collection and Use
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to, your email address, name, phone number, postal address, other information (“Personal Information”). We collect this information for the purpose of providing the Service, identifying and communicating with you, responding to your requests/inquiries, servicing your purchase orders, and improving our services. We store the collected information on servers in EU Region. PepMelon, just like any other business, currently uses third-party Sub Processors to provide various business functions like web hosting, web or application analytics, cloud infrastructure, email notifications, and customer support. The list of our Sub Processors: Blue Host, Google Analytics.
Collecting data – registration, make and order, pay
Our products are available for sale on this website, and you should register to place an order or pay on this website. We deliver our products through different shipping delivery services. Our products are available for sale on Amazon, Ebay and Etsy, where you should register to order our products, but not on this site. We get information from these websites to service your purchase orders. We collect and we receive personal data, information that indicates your identity: Name, address, postal address, delivery address, telephone number and e-mail address.
We store your personal data only to the extent necessary for the processing and handling of your order. We do not pass on your personal data to third parties.
For the purpose of credit assessment, however, data may be exchanged with service providers and Schufa. Your concerns worthy of protection are always taken into account.
We may also collect information that your browser sends whenever you visit our Site or when you access the Site by or through a mobile device (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics. When you access the Site by or through a mobile device, this Log Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use and other statistics. In addition, we may use third party services such as Google Analytics that collect, monitor and analyse this type of information in order to increase our Site’s functionality. These third party service providers have their own privacy policies addressing how they use such information. Please see the section regarding Location Information below regarding the use of your location information and your options.
We may use and store information about your location depending on the permissions you have set on your device. We use this information to provide features of our Site, to improve and customise our Site. You can enable or disable location services when you use our Site at anytime, through your mobile device settings.
Google also recommends installing the Google Analytics Opt-out Browser Add-on – for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page
We may employ third party companies and individuals to facilitate our Site, to provide the Site on our behalf, to perform Site-related services or to assist us in analysing how our Site is used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.
Compliance with Laws
We will disclose your Personal Information where required to do so by law or subpoena or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Site.
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Links to Other Sites
Our Site does not address anyone under the age of 13 (“Children”). We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child under age 13 without verification of parental consent, we take steps to remove that information from our servers.
Rights under GDPR
Under GDPR (General Data Protection regulation) you have a number of rights relating to your personal data, these will come into force on the 25th May 2018, for further information please see https://ec.europa.eu/info/law/law-topic/data-protection_en
Right to Restrict Processing
You have the right to request that we restrict processing of your personal data where there is no legitimate interest for us to do so:
- Where the accuracy of the personal data is contested, to restrict the processing until such time as the accuracy has been sufficiently verified. Where you object to the processing (See Right to Object), and where we are considering whether there are legitimate grounds to override the request.
- When processing is unlawful and you oppose erasure and request restriction instead.
- If we no longer need the personal data but you require the data to establish, exercise or defend a legal claim. You can exercise the right at any time by contacting our team (see Contacting Us).
Right of Access (Access to Information)
The GDPR Act gives you the right to access information held about you. You can exercise this right by contacting us (see Contact Us). We are required to verify your identify before processing any right to access request, once verified the data shall be provided within 28 days. The data shall be provided free of charge however an admin fee may be applied where a request is manifestly unfounded or excessive, particularly if it is repetitive.
Right to Erasure (Also known as the right to be forgotten)
As an individual you have the right to request the erasure of any data we hold on you, this is not an absolute right, for example it does not override our requirement under German law to keep financial data such as invoice information. You can make a request where your personal data is no longer necessary in relation to the purpose for which it was originally collected/processed, for example if you cancel all services you have with us. To make a right to erasure request please contact our customer services team (see Contacting Us).
Right to Rectification
The GDPR provides the right to have any personal data rectified that may be incorrect or incomplete. Customers can update their own personal details via the client area however if this is not sufficient please contact our customer services team (See contact Us).
Right to ObjectYou have the right to object to the processing of your personal data where there is no legitimate or lawful reason to do so. To make a right to object request please contact our customer services team (see Contacting Us).
Owner and Data Controller
PepMelon Eva Puskas, 73734 Esslingen am Neckar, Germany, Stuttgarter Str. 53
If you have any questions regarding privacy while using our Site, or have questions about our practices, please contact us via email at firstname.lastname@example.org