+49 (0) 2392 507840 - office@wave-hawaii.com

Data protection


Unless otherwise specified below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide has no consequences. This only applies if no other information is given in the subsequent processing operations.
"Personal data" is all information that relates to an identified or identifiable natural person.


Server log files 
You can visit our website without giving any personal information. 
Every time our website is accessed, usage data is transmitted to us or our web host / IT service provider via your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred and the requesting provider. The processing takes place on the basis of Art. 6 Paragraph 1 lit. 
Your data will be transmitted to Canada, among others. The EU Commission has issued an adequacy decision for data transfers to Canada.

Contact

Responsible person
Contact us if you wish. The contact details of the person responsible for data processing can be found in our legal notice.



Initiative contact by the customer by email
If you initiate business contact with us by e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent that you have made available. The data processing serves to process and answer your contact request.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR out of our predominant legitimate interest in processing and answering your request. In this case you have the right, for reasons that arise from your particular situation, to object at any time to this processing of personal data relating to you based on Article 6 (1) (f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form 
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you have made available. The data processing serves the purpose of establishing contact.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR out of our predominant legitimate interest in processing and answering your request. In this case you have the right, for reasons that arise from your particular situation, to object at any time to this processing of personal data relating to you based on Article 6 (1) (f) GDPR. We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.


Customer account orders 

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation. Your customer account will then be deleted.


Collection, processing and transfer of personal data for orders 
When you place an order, we only collect and process your personal data insofar as this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you. 
Your data will be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.
Your data will be transmitted to Canada, among others. The EU Commission has issued an adequacy decision for data transfers to Canada.


advertising 

Use of the email address for sending newsletters
We use your e-mail address, regardless of the contract processing, exclusively for our own advertising purposes for sending the newsletter, provided you have expressly consented to this. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. 


Shipping service provider merchandise management 

Passing on the e-mail address to shipping companies for information about the shipping status
We will pass on your e-mail address to the transport company as part of the contract processing, provided you have expressly consented to this in the ordering process. The purpose of the transfer is to inform you about the dispatch status by email. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company without affecting the legality of the processing carried out on the basis of the consent until the revocation.

Use of an external inventory control system
We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected as part of the order will be sent to
Billbee GmbH, Paulinenstrasse 54, 32756 Detmold
Collmex 
transmitted.


Payment service provider 

Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)

Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. on our website. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies can also be used for this purpose. The cookies enable your browser to be recognized.
The use of cookies or comparable technologies is based on Section 15 (3) sentence 1 of the German Telemedia Act. Your personal data is processed on the basis of Article 6 (1) (f) GDPR out of our predominant legitimate interest in a customer-oriented offer of various payment methods. For reasons that arise from your particular situation, you have the right to object to this processing of your personal data at any time.
When you select and use PayPal Express, the data required for payment processing will be transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. You can find more information on data processing when using the PayPal Express payment service in the associated data protection declaration at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS (http: //www.paypal .com / de / webapps / mpp / ua / privacy-full? locale.x = de_DE # Updated_PS).

Use of personal data when selecting Klarna payment options
In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. In this way Klarna can assess whether you can use the payment options offered by Klarna and adapt the payment options to your needs. General information about Klarna is available at: https://www.klarna.com/de/ (https://www.klarna.com/de/). Your personal details are processed by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy (https: // cdn .klarna.com / 1.0 / shared / content / legal / terms / 0 / de_de / privacy).


Cookies 

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is called up again. 

Cookies are saved on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and individually decide whether to accept them and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent. 

Under the following links you can find out how you can manage cookies in the most important browsers (including deactivating them): 
Chrome: https://support.google.com/accounts/answer/61416?hl=de (https://support.google.com/accounts/answer/61416?hl=de)
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies (https://support.microsoft.com/de-de/help/17442 / windows-internet-explorer-delete-manage-cookies) 
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen) 
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/ safari / manage-cookies-and-website-data-sfri11471 / mac) 


Technically necessary cookies 
Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, more effective and safer. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages. 

The use of cookies or comparable technologies is based on Section 15 (3) sentence 1 of the German Telemedia Act. Your personal data is processed on the basis of Article 6 (1) (f) GDPR out of our predominant legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. 
For reasons that arise from your particular situation, you have the right to object to this processing of your personal data at any time.

Plug-ins and miscellaneous

Use of YouTube
We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is an affiliate of Google LLC (1600 Amphitheater Parkway, Mountain View, CA. 94043, USA; "Google") affiliated company.
The function shows videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data is transmitted on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).
The use of cookies or comparable technologies is based on Section 15 (3) sentence 1 of the German Telemedia Act. Your personal data is processed on the basis of Art. 6 Paragraph 1 lit. f GDPR out of our predominant legitimate interest in the needs-based and targeted design of the website. For reasons that arise from your particular situation, you have the right to object to this processing of your personal data at any time.
For more information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy, see YouTube's data protection information at https://www.youtube.com/t/privacy (https: // www .youtube.com / t / privacy).


Affected rights and storage duration

Duration of storage
After the contract has been fully processed, the data is initially stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial retention periods, and then deleted after the period has expired, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, according to Art. 21 Paragraph 1 GDPR, you have the right to object to processing based on Art. 6 Paragraph 1 f GDPR, as well as against processing for the purpose of direct mail.

Right of appeal to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you are of the opinion that your personal data is not being processed lawfully.

Right to object
If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 (1) (f) GDPR, you have the right to object to this processing at any time with future effect for reasons that arise from your particular situation.
After the objection has been made, the processing of the data concerned will be terminated, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

last update: 04.02.2021