Data protection

As of 02/22/2022

As of May 25, 2018, the provisions of the EU General Data Protection Regulation (hereinafter: GDPR) apply throughout Europe. In the following we would like to inform you about the processing of personal data carried out by Roth Product Solutions in accordance with this new regulation (compare Article 13 GDPR). Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send your questions to the e-mail address given under point 2.

Table of Contents

1. Overview
2. Contact details of the person responsible for processing and the company data protection officer
3. Purposes of data processing, legal bases and legitimate interests pursued by Roth Product Solutions or a third party and categories of recipients
3.1. Visiting our website
3.2. Conclusion, performance or termination of a contract
3.3. Data processing for advertising purposes
3.4. Online presence and website optimization
3.5. customer account
4. Transfer to recipients outside the EU
5. Your Rights
6. Data Security Measures

1. Overview

The following data protection declaration informs you about the type and scope of the processing of so-called personal data by Roth Product Solutions. Personal data is information that can be directly or indirectly assigned to your person or can be assigned. 
Data processing by Roth Product Solutions can essentially be divided into two categories:

- For the purpose of contract processing, all data required for the execution of a contract with Roth Product Solutions will be processed. If external service providers are also involved in processing the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the extent required.

- When you visit the website www.mecopad.com / www.mecopad.de, various information is exchanged between your device and our server. This can also be personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in the browser of your end device.

In accordance with the provisions of the GDPR, you have various rights that you can assert against us. This includes, among other things, the right to object to selected data processing, in particular data processing for advertising purposes. 
If you have any questions about our data protection information, you are welcome to contact our data protection officer at any time. You will find the contact details below.

2. Contact details of the person responsible for processing and the company data protection officer

This data protection information applies to data processing by Roth Product Solutions, Steffen Roth, Weiherstraße 3 , 79232 Freiburg ("data protection officer") and to the following websites: www.mecopad.com, www.mecopad.de. The data protection officer can be reached at the above address or at mecopad@gmx.de.

3. Purposes of data processing, legal bases and legitimate interests pursued by Roth Product Solutions or a third party and types of recipients

3.1. Visiting our website

When you visit our website, the browser used on your device automatically sends information to our website server and temporarily saves it in a so-called log file. We have no influence on this. The following information is also recorded without your intervention and stored until it is automatically deleted: 
- the IP address of the requesting internet-enabled device, 
- the date and time of access, 
- the name and URL of the retrieved file, 
- the website/application from which access was made, 
- the browser you are using and, if applicable, the operating system of your Internet-enabled computer and the name of your provider.

The legal basis for processing the IP address is Article 6 Paragraph 1 f) GDPR. Our legitimate interest follows from the data collection purposes listed below. At this point, we would like to point out that we are not able to draw any direct conclusions about your identity from the data collected and that we will not draw them either. 
The IP address of your end device and the other data listed above are used by us for the following purposes: 
- Ensuring a smooth connection setup, 
- ensuring comfortable use of our website, 
- Evaluation of system security and stability.

The data is stored for a period of 38 months and then automatically deleted. Furthermore, we use so-called cookies, tracking tools and targeting methods for our website. Exactly which procedures are involved and how your data is used for this is explained below under Section 3.4. explained in more detail. 
If you have agreed to the so-called geolocation in your browser or in the operating system or other settings of your end device, we use this function to be able to offer you individual services related to your current location. We process your location data processed in this way exclusively for this function. If you stop using it, the data will be deleted.

3.2. Conclusion, performance or termination of a contract

3.2.1. Data processing upon conclusion of the contract

The object of Roth Product Solutions is the sale of bags with integrated drinking bottles as well as bags and glass bottles of all kinds. 
In this context, we process the data required for the conclusion, implementation or termination of a contract. Which includes:
- First name Last Name
- E-mail address
- Billing and delivery address
- Billing and payment data
- telephone number, if applicable

The legal basis for this is Article 6 Paragraph 1 b) GDPR, ie you provide us with the data on the basis of the contractual relationship between you and us. In order to process your e-mail address, we are also obliged to send an electronic order confirmation due to a requirement in the German Civil Code (BGB) (Article 6 Paragraph 1 Letter c) GDPR). If we do not use your contact details for advertising purposes (see 3.3 below), we will store the data collected for contract processing until the statutory or possible contractual warranty and guarantee rights have expired. After this period has expired, we will keep the information on the contractual relationship required under commercial and tax law for the periods specified by law. For this period (usually ten years from the conclusion of the contract), the data will only be processed again in the event of a review by the tax authorities. 
The following data processing is also required to process the purchase contract: 
We pass on the necessary payment data to a payment service provider commissioned by us. We pass on information about your delivery address to a logistics company commissioned by us for the purpose of processing the purchase contract. In order to ensure that the goods are delivered according to your wishes, we transmit your e-mail address and, if applicable, your telephone number to the logistics company we have commissioned. The logistics company will contact you in advance of the delivery to coordinate the details of the delivery with you. The data is transmitted solely for this purpose and deleted again after delivery.

3.2.2. Identity, creditworthiness and transmission to credit agencies

If necessary, we will check your identity using information from service providers. The legal basis for this is Article 6 Paragraph 1 Letter b) and Letter f) GDPR. The authorization to do so results from the protection of your identity and the avoidance of fraud attempts at our expense. The circumstance and the result of our request will be stored in your customer account or your guest account for the duration of the contractual relationship.

In the event of a delay in payment, we will transmit the necessary data to a company commissioned with asserting the claim if the other legal requirements are met. The legal basis for this is both Article 6 Paragraph 1 Letter b) and Article 6 Paragraph 1 Letter f) GDPR. The assertion of a contractual claim is to be regarded as a legitimate interest within the meaning of the second provision. If the other legal requirements are met, we also transmit information about the delay in payment or any bad debts to credit agencies cooperating with us. The legal basis for this is Article 6 Paragraph 1 Letter f) GDPR. The legitimate interest required here results from our interest and that of third parties in reducing contractual risks for future contracts.

3.3. Data processing for advertising purposes

The following statements refer to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Article 6 Paragraph 1 Letter f) as fundamentally conceivable and as a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether storage is necessary for advertising purposes. At Roth Product Solutions we also follow the principle of deleting data for advertising use after 38 months. Please refer to Section 3.3.3 for how to proceed in the event of your objection.

3.3.1. Promotional purposes of Roth Product Solutions and third parties

If you have concluded a contract with us, we will treat you as an existing customer. In this case, we will process your postal contact details unless you have given your specific consent, in order to send you information about new products and services. We process your e-mail address in order to send you information for our own, similar products, unless you have given your specific consent.

3.3.2. Interest-based advertising

So that you only receive information that is supposedly of interest to you, we categorize and add further information to your customer profile. Both statistical information and information about you (e.g. basic data of your customer profile) are used for this purpose. The aim is to send you advertising based solely on your actual or supposed needs and not to bother you with unnecessary advertising.

3.3.3. Right to object

You can object to data processing for the aforementioned purposes at any time free of charge, separately for the respective communication channel and with effect for the future. An e-mail or a postal letter to the contact details mentioned under 1. is sufficient for this.

If you object, the affected contact address will be blocked for further advertising data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after receipt of your objection. This is technically due to the necessary lead time for advertisements and does not mean that we will not implement your objection. Thank you very much for your understanding.

3.3.4. Newsletter dispatch

On our website we offer you the opportunity to register for our newsletter. To be sure that no mistakes were made when entering the email address, we use the so-called double opt-in procedure: after you have entered your email address in the registration window, we will send you a confirmation link. Only when you click on this confirmation link will your e-mail address be added to our mailing list. You can revoke your consent given in this way at any time with effect for the future. For this purpose, a short notice by e-mail to the e-mail address given under 2. or via the corresponding link in the newsletter is sufficient.

3.4. Online presence and website optimization

3.4.1. Cookies - General information

We use so-called cookies on our website on the basis of Article 6 Paragraph 1 Letter f GDPR. Our interest in optimizing our website is to be regarded as legitimate within the meaning of the aforementioned regulation. Cookies are small files that your browser creates automatically and that are stored on your end device (laptop, smartphone, etc.) when you visit our site. Cookies do not damage your end device and do not contain viruses, Trojans or other harmful software. Information is stored in the cookie that arises in connection with the specific end device used. However, this does not mean that we are immediately informed of your identity. The use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website or that you have already logged into your customer account. These are automatically deleted after leaving our site. In addition, we also use temporary cookies for the purpose of user-friendliness, which are stored on your end device for a specific period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what inputs and settings you have made so that you do not have to enter them again. If you have a customer account with Roth Product Solutions and are logged in or activate the "stay logged in" function, the information stored in cookies will be saved in your customer account.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you and to display information specially tailored to you. These cookies enable us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website. The storage period of the cookies depends on their purpose and is not the same for everyone.

3.4.2. Google Analytics

For the purpose of the needs-based design and continuous optimization of our pages, we use Google Analytics, a web analysis service provided by Google Inc. ("Google"), on the basis of Article 6 Paragraph 1 Letter f) GDPR. In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as
- browser type/version,
- operating system used,
- referrer URL (the previously visited page),
- host name of the accessing computer (IP address),
- time of server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and to provide other services related to website and internet use for the purposes of market research and needs-based design of these websites. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (so-called IP masking).

You can prevent the installation of cookies by setting your browser software accordingly; we would like to point out to you however that in this case not all functions of this website can be used in full. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on. An opt-out cookie will be set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website.

3.4.3. targeting

The targeting measures listed below and used by us are carried out on the basis of Article 6 Paragraph 1 Letter f) GDPR. With the targeting measures used, we want to ensure that only advertising based on your actual or supposed interests is displayed on your end device. Not bothering you with advertisements that are of no interest to you is in your interest as well as in ours.

3.4.3.1 Onsite Targeting

On our website, information for the optimization of advertisements is recorded and evaluated using cookies. This information includes, for example, which of our products you are interested in. The collection and evaluation is exclusively pseudonymous and does not enable us to identify you. In particular, the information will not be merged with your personal data. Based on the information, we can show you offers on our site that are specifically tailored to your interests as they result from your previous user behavior. The cookie is automatically deleted after 6 months.

3.4.3.2 Retargeting

We also use re-targeting technologies from Google, Facebook, etc. This enables us to make our online offering more interesting and tailored to you. For this purpose, a cookie is set with which interest data is collected using pseudonyms. Based on this information, you will be shown interest-based advertisements about our offers on the websites of our partners. No directly personal data is stored and no usage profiles are combined with personal data about you. The cookie is automatically deleted for 6 months and thereafter.

3.4.3.3 Affiliates

We work together with advertising partners to make the online offer on our site even more interesting for you. For this purpose, cookies are also set by our advertising partners when you visit our site (so-called third-party cookies). Information about your user behavior and your interests when you visit our site is also stored in the cookies of our advertising partners using pseudonyms. In some cases, information is also recorded that arose on other sites before you visited our site. Based on this information, you will be shown interest-based advertisements from our advertising partners. No personal data is stored and no usage profiles are combined with personal data about you. The cookie is stored for a period of 6 months and then automatically deleted. You can prevent the interest-based advertisements from our advertising partners from being displayed by means of a corresponding cookie setting in your browser (see also 3.4.1).

3.4.3.4. Objection/opt-out option

You can prevent the targeting technologies explained by making a corresponding cookie setting in your browser (see also 3.4.1).

3.5. customer account

In order to provide you with the greatest possible convenience when shopping, we offer you the permanent storage of your personal data in a password-protected customer account. After setting up a customer account, no new data entry is required. You can also view and change the data stored about you in your customer account at any time.

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This is used together with your e-mail address to access your customer account. Please treat your personal access data confidentially and in particular do not make them accessible to unauthorized third parties. We cannot accept liability for misused passwords unless we are responsible for the misuse. Please note that even after leaving our website, you will automatically remain logged in unless you actively log out. You have the option of deleting your customer account at any time. Please note, however, that the data visible in the customer account will not be deleted at the same time.

4. Recipients outside the EU

With the exception of the processing shown, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The processing mentioned causes data to be transmitted to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. The data is transmitted in accordance with the principles of the so-called Privacy Shield and on the basis of so-called standard contractual clauses of the EU Commission.

5. Your Rights

5.1. overview

In addition to the right to revoke the consent you have given us, you have the following additional rights if the respective legal requirements are met:

- Right to information about your personal data stored by us in accordance with Article 15 GDPR; In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it was not collected directly from you,

- Right to correct incorrect data or to complete correct data in accordance with Art. 16 GDPR,

- Right to erasure of your data stored by us in accordance with Art. 17 GDPR insofar as there are no legal or contractual retention periods or other legal obligations or rights to further storage,

- Right to restrict the processing of your data in accordance with Art. 18 GDPR, insofar as you dispute the accuracy of the data, the processing is unlawful but you refuse to delete it; the person responsible no longer needs the data, but you need them to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR,

- Right to data portability in accordance with Art. 20 GDPR, i.e. the right to have data that we have stored about you that you have provided transmitted in a common, machine-readable format, or to request transmission to another person responsible

- Right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.

5.2. Right to object

Subject to the requirements of Art. 21 (1) GDPR, data processing can be objected to for reasons that arise from the particular situation of the data subject. 
The above general right of objection applies to all processing purposes described in this data protection information, which are processed on the basis of Article 6 paragraph 1 letter f) DSGVO.

In contrast to the special right to object to data processing for advertising purposes, under the GDPR we are only obliged to implement such a general objection if you give us reasons of overriding importance (e.g. a possible danger to life or health). In addition, there is the option of contacting the supervisory authority responsible for HAX Products, the Berlin Commissioner for Data Protection and Freedom of Information.

6. Data Security

All of your personally transmitted data, including your payment details, will be transmitted using the generally accepted and secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard that is also used, for example, in online banking. You can recognize a secure SSL connection by the appended 's' to http (https://) in the address bar of your browser or by the lock symbol at the bottom of your browser.

We also use appropriate technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments and may be certified.