Thanks to our years of business experience as an wholesale and retail company, we know how important it is to protect our customers’ personal data.
Data protection is a matter of trust, which means that the observation of all the valid data protection regulations has therefore been a given and been extremely important to us for years.
In order to make the protection of your personal data easier, we are informing you about the processing of your personal data as part of our customer relationship.
The responsible party for the purpose of the General Data Protection Regulation (GDPR) and other national data protection acts of the member states as well as other data protection regulations is:
Oy MaWe Trading Ab
Tel. +358 50 555 8204
E-mail: sales at mawetrading.com
II. Name and Address of the Data Protection Officer
The Data Protection Officer is:
64230 Närpes st.
Tel. +358 50 555 8204
E-mail: magnus at mawetrading.com
We gather and use our users’ personal data only to the extent necessary for providing a functioning website as well as content and performance. The gathering and the use of our users’ personal data takes place regularly only with the user’s consent. There is only an exception to this when previous consent cannot be obtained for essential reasons and the processing of data is permitted by legal regulations.
Insofar as we can obtain the consent from the person concerned for the processing of personal data, Art. 6 paragraph. 1 lit. a from the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data.
Art. 6 paragraph. 1 lit. b GDPR serves as the legal basis for processing personal data of which the person concerned is the affected party that is required to fulfil a contract. This also applies to the processing that is required for the consummation of pre-contractual measures.
Art. 6 paragraph. 1 lit. c GDPR serves as the legal basis insofar as processing personal data is necessary for the fulfilment of a legal obligation that is subject to our company. Art. 6 paragraph. 1 lit. d GDPR serves as the legal basis in the event of essential interests of the person concerned or another natural person requiring the processing of personal data. Art. 6 paragraph. 1 lit. f GDPR serves as a legal basis for the processing when the processing is required to protect a legitimate interest of our company or a third party and the interests, civil rights and fundamental freedoms of the person concerned does not outweigh the aforementioned interest.
The personal data of the person concerned will be deleted or blocked as soon as it is no longer necessary for the purpose of its collection. Furthermore, storage can take place if it is provided by a European and national legislator in EU regulations, legislation or other requirements to which the person responsible is subject. Blocking or deleting data also takes place when a storage period, required by the mentioned norms, expires, unless it is necessary to store data for longer for a completion of a contract or a fulfilment of a contract.
Every time an internet page is viewed, our system automatically gathers data and information from the computer system of the computer used to view the page.
The following data will be collected:
The data will also be saved in our system’s log files. This data does not get saved together with other personal data from the user.
The legal basis for the temporary storage of data and the log files is Art. 6 paragraph. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to make a delivery of the website on the user’s computer possible. For this purpose, the user’s IP address must be saved for the duration of the session. It is stored in the log files in order to guarantee the functionality of the website. In addition to that, the data serves to optimise our website and to guarantee the safety of our information technology systems. An analysis of the data for marketing purposes does not take place in this context. In these cases, our valid interest also lies in the processing of data according to Art. 6 paragraph. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose of collection. In the case of gathering data for the provision of the website, this will be when the respective session has ended.
In the case of storing data in log files this will be no later than seven days. An extension of storage is possible. In this case, the user’s IP addresses will be deleted or distorted so that it is no longer possible to assign them to the client who viewed the website.
The gathering of data for the provision of the website and the storing of data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.
The legal basis for processing personal data using cookies is Art. 6 paragraph. 1 lit. f GDPR.
We need cookies for the following things: shopping basket, transfer of language settings, wishlist functionality, contact form.
For these purposes, our legitimate interests in the processing of personal data also lie with Art. 6 paragraph. 1 lit. f GDPR.
This is how you can tell your browser how to deal with cookies
There is an option of subscribing to a free newsletter on our website. The E-mail address from the form gets transferred to us when you register for the newsletter.
In addition to this, the following data will be collected during registration:
The data will not be given to third parties in the context of data processing for the sending of newsletters. The data is only used for sending the newsletter.
The legal basis for processing data after a user has registered for the newsletter is Art. 6 paragraph. 1 lit. a GDPR.
The collection of the user’s E-mail address is for delivering the newsletter. The collection of other personal data in the context of the registration procedure is for preventing abuse of the service or the E-mail address used.
The data gets deleted as soon as it is no longer necessary for the purpose of its collection. The user’s E-mail address will be saved for the duration of the user’s subscription to the newsletter. The other personal data collected as part of the registration procedure will normally get deleted after seven days.
The user concerned can unsubscribe to the newsletter at any time. For this purpose, there is a respective link in every newsletter. This link also allows a revocation of the consent to the storage of personal data during the registration procedure.
On our B2B website, we give the user the option to register by providing personal data. The data is entered in a form and passed on to us and stored by us. The data is only passed on to third parties as part of the processing of orders e.g. shipment through a parcel service provider or carrier. The following data is collected as part of the registration process:
The date and time are also saved to the data record at the time of registration.
As part of the registration process, consent is obtained from the user for processing this data.
The registration will be reviewed and the user's customer account is activated after the verification is successful.
The legal basis for processing data with the existence of consent from the user is Art. 6 paragraph. 1 lit. a GDPR. The legal basis for initiating, concluding and carrying out orders is Art. 6 paragraph. 1 lit. b GDPR.
A user registration and the creation of a customer account is mandatory to carry out orders in our wholesale online shop. Collecting data is necessary for fulfilling the contract with the user or for implementing pre-contractual measures.
The data gets deleted as soon as it is no longer necessary for the purpose it was collected for. For the data collected during the registration process this is the case when the registration on our website is cancelled or amended. This is the case when personal data collected during an order, that is necessary for fulfilling the contract or for implementing pre-contractual measures, is no longer necessary for the implementation of the contract. It might be necessary to save personal data of the contracting party even after the conclusion of the contract to comply with contractual or legislative duties.
As a registered user you can terminate the registration at any time by contacting the customer service of Oy MaWe Trading Ab. More information can be obtained by contacting the customer service team of Oy MaWe Trading Ab.
If the data is necessary for the fulfilment of a contract or the implementation of pre-contractual measures, then early deletion of the data is only possible if non-contractual or legal obligations exclude a deletion.
There is a contact form on our website that can be used for contacting us electronically. If a user takes advantage of this option, the data entered in the form will be passed on to us and stored by us. The data stored is:
Your consent will be obtained for processing the data in the context of the sending process and you will be directed to the data protection declaration.
The data is not given to third parties in this context. The data is only used for processing the conversation.
The legal basis for processing data with the existence of consent from the user is Art. 6 paragraph. 1 lit. a GDPR.
Processing personal data from the form is only for processing the contact.
The other personal data processed during the sending process is for preventing abuse of the contact form and to ensure the safety of our information technology system.
The data gets deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the contact form and the data sent via E-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the facts in question have been fully clarified.
The additional personal data that was collected during the sending process will normally get deleted after seven days.
The user has the option of withdrawing their consent to the processing of their personal data via telephone or the contact form. In this case, the conversation cannot be continued.
All the personal data that has been saved as part of making contact will get deleted in this case.
If your personal data is processed, you are the affected person according to the GDPR and these are the following rights that you have:
You have the right to demand a confirmation from the responsible party whether personal data that affects you will be processed by us.
If your personal data is being processed, you can demand disclosure about the following information:
You have the right to demand information about whether your personal data will be passed on to a third country or an international organisation. In this context, you can demand to be informed about suitable guarantees according to Art. 46 GDPR related to the transmission.
You have the right to have your personal data rectified and/or completed by the responsible party if this data is inaccurate or incomplete. The responsible party has to rectify the information immediately.
You can demand a restriction of the processing of your personal data under the following conditions:
If the processing of your personal data has been restricted, this data – with the exception of its storage – may only be processed with your consent or for enforcing, exercising or defending a legal claim or protection of rights from another natural or legal person or for reasons of important public interest of the Union or of a member state.
If the restriction of the processing is restricted according to the aforementioned conditions, you will be informed before the restriction has been lifted.
You can demand that the responsible party deletes your personal data immediately and the responsible party must delete this data immediately if the following reasons apply:
If the responsible party has made your personal data public and they are obliged to delete the data according to Art. 17 paragraph. 1 GDPR, then they shall take appropriate measures taking account of the available technology and the cost of implementation, including those of a technical nature, in order to inform the responsible data processors, who process your personal data, that you, as the affected person, have demanded that all links to this personal data or from copies or replicas of this personal data be deleted.
The right to erasure does not apply if the processing is necessary for:
If you have asserted your right to rectification, erasure or restriction of the processing of your data against the responsible party, then they are obliged to inform all the recipients, that have disclosed your personal data, about the rectification or erasure of the data or the restriction of the processing of the data, except when it proves to be impossible or involves disproportionate effort.
You have the right to be informed about the recipients by the responsible party.
You have the right to receive your personal data, which you have given to the responsible party, in a structured, current and machine-readable format. Furthermore, you have the right to transfer this data to another responsible party without obstruction from the responsible party that has already received your personal data provided that
In exercising this right, you also have the right to ask one responsible party to transfer your personal data directly to another as far as this is technically possible. The rights and freedoms of others are not allowed to be affected.
The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task, that is of public interest or in the exercise of official authority that has been delegated to the responsible party.
You have the right to object at any time, for reasons that arise from your particular situation, to the processing of your personal data that takes place because of Art. 6 paragraph. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
The responsible party no longer processes your personal data, except when they can provide compelling, worthy reasons for the processing that outweigh your interests, rights and freedoms or the processing is for the enforcement, exercise or defence of legal claims.
If your personal data is processed to conduct direct advertising, you have the right to object at any time against the processing of your personal data for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
If you object to the processing for direct advertising purposes, then your personal data will no longer be processed for these purposes.
You have the possibility of exercising your right to object through automated procedures in the context of using services from the information society – regardless of the directive 2002/58/EG – where technical specifications are used.
You have the right to withdraw your data protection consent declaration at any time. Withdrawing your consent will not affect the lawfulness of the processing carried out on the basis of the consent up until the withdrawal.
You have the right not to be subject to a decision based solely on an automated processing – including profiling – that will have legal effects or affects you significantly in a similar way. This does not apply when the decision is
However, these decisions must not be based on specific categories of personal data according to Art. 9 paragraph. 1 GDPR, unless Art. 9 paragraph. 2 lit. a or g applies and suitable measures have been taken to protect your rights, freedoms and legitimate interests.
In regard to the cases mentioned in (1) and (3), the responsible party shall take suitable measures to safeguard your rights, freedoms and legitimate interests, where at least the right to obtain intervention of a person on the part of the responsible party to declare their own point of view and to hear an appeal of the decision.
Regardless of other administrative or judicial relief, you have the right to complain to a supervisory authority especially in the member state of your place of residence, your place of work or the place of the alleged offence when you are of the opinion that the processing of your personal data violates the GDPR.
The supervisory authority, where the complaint was submitted, informs the claimant about the status and the results of the complaint including the possibility of judicial relief according to Art. 78 GDPR.
We use various web analysis services on our internet pages; these pages mainly use so-called cookies.
We use Google Analytics, a Google Inc. service on our websites. The operator of the service is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
We may use the extension “-anonymizelp” on our websites for IP anonymity, whereby your IP address is shortened by Google beforehand within the member states of the European Union or in other contractual states of the agreement in the European Economic Area.
On rare occasions, the full IP address will be passed on to a Google server in the USA and be shortened there.
Google will use the generated information on our behalf, in order to analyse the use of our website, compile reports on website activities at mawetrading.com and to provide us with other services related to the website and internet usage.
Google will not merge the IP address collected by Google Analytics with other data from Google. Google may pass on the information collected by Google Analytics to third parties if Google is legally bound to do so or as far as third parties process this data on Google’s behalf.
We have implemented Google Analytics reports for performance of demographic characteristics and interests for our website. We use data and visitor data obtained by third parties (e.g. age, sex, interests) via Google’s interest-based advertising in the context of Google Analytics.
You, the user of our website, can prevent the storage of cookies by going to your browser’s settings.
We would like to inform you that you then might not be able to use all of our website’s functions in their entirety.
Furthermore, you can object to and prevent the collection of data, including your IP address, generated by the cookie and your use of the website going to Google and the processing of this data by Google by downloading and installing the browser plug-in that can be found here: http://tools.google.com/dlpage/gaoptout?hl=de.
We would like to inform you that the Google Analytics on our website has been expanded with “gat._anonymizeIp()”, in order to ensure an anonymous collection of IP addresses, so-called IP masking.
Further information about data protection at Google can be found here: https://www.google.de/intl/de/policies.