7) Processing of data for the purpose of order handling
7.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment handling. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b GDPR.
7.2 We work with external shipping partners to fulfil our contractual obligations to our customers. We pass on your name as well as your delivery address exclusively for the purpose of delivering goods to a shipping partner selected by us, pursuant to Art. 6 (1) point b GDPR.
7.3 Use of Payment Service Providers
- Amazon Pay
- BS PAYONE
If you decide on a payment method of the payment service provider BS PAYONE, payment is processed by the payment service provider BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, to whom we pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider PAYONE and only to the extent necessary.
If you have decided, as payment option, on the payment services "payolution invoice", "payolution instalment purchase" or "payolution direct debit" of payolution GmbH, Am Euro Platz 2, 1120 Vienna, Austria ("payolution"), you agree to the transmission of your data to payolution during the order process for the purpose of the creditworthiness and account number check. For the processing of these payment methods, personal data (first name, surname, address, e-mail, telephone number, date of birth, IP address, gender) together with data required for the transaction processing (article, invoice amount, interest, instalments, due dates, total amount, invoice number, taxes, currency, order date and order time) are transmitted to payolution according to art. 6 (1) point a GDPR.
This data is transmitted so that payolution can assess whether the payment option selected by you can be granted with regard to payment and/or bad debt risks. Payolution will obtain further information by transmitting the data provided to the following credit agencies for the purpose of identity and credit assessment:
- CRIF GmbH, Diefenbachgasse 35, A-1150 Wien
- CRIF AG, Hagenholzstrasse 81, CH-8050 Zürich
- CRIF GmbH, Dessauerstraße 9, 80992 München
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden
- KSV1870 Information GmbH, Wagenseilgasse 7, A-1120 Wien
- CRIF Bürgel GmbH -Niederlassung Hamburg-, Friesenweg 4, Haus 12
- Creditreform Boniversum GmbH, Hellersbergstr. 11, D-41460 Neuss
- infoscore Consumer Data GmbH, Rheinstraße 99, D-76532 Baden-Baden
- ProfileAddress Direktmarketing GmbH, Altmannsdorfer Strasse 311, A-1230 Wien
- Deutsche Post Direkt GmbH, Junkersring 57, D-53844 Troisdorf
- payolution GmbH, Am Euro Platz 2, A-1120 Wien
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. Your personal data will also be transmitted to Schufa (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden) for the purpose of identity verification in accordance with Art. 6 (1) point 1 a GDPR. Schufa will then inform payolution about the degree of conformity (in percentage) of the personal data stored with Schufa with the data provided by you, as well as, if applicable, a reference to an identification-supported legitimation check carried out by Schufa or another contractual partner. Payolution can thus recognize whether a person is stored in the data stock of Schufa under the address you have given on the basis of the transmitted agreement rates.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or to payolution. However, payolution may still be entitled to process your personal data if this is necessary for the contractual payment processing.
When you pay via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 (1) point b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency pursuant to Art. 6 (1) point f GDPR. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including the credit agencies used, please refer to PayPal's data protection declaration at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.