Data Policies

We, Snash GmbH, respect your privacy and take the protection of your personal data very seriously. Snash GmbH attaches great importance to treating the information provided by you for business purposes at all times in accordance with the statutory provisions and with the utmost care and responsibility.

On this website we have provided you with a range of information on data protection at

- visiting our website: www.snash.com

- the subscription of our newsletter,

- the use of cookies and

- communication with us

and related topics.


1. ON WHAT BASIS DO WE PROCESS YOUR DATA?
Snash processes your personal data ("your data") on a legal basis and - if necessary - on the basis of your consent. Since 25.05.2018, the most important legal basis has been the so-called EU Data Protection Basic Regulation (DSGVO). Of course, we also observe all other relevant legal requirements, in particular those of the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).


2. WHO IS RESPONSIBLE FOR DATA PROTECTION?
Unless otherwise stated, the person responsible for the processing of your data explained below is Snash GmbH (also: "snash" or "we").

3. YOU VISIT SNASH.COM
As a visitor to our website www.snash.com, you can use it to find out about our offers and our company and to use the other functions described here. In the following we would like to inform you as precisely as possible about the processing of your personal data during your visit to our website in accordance with the relevant legal requirements, in particular the DSGVO.

Your personal data will be transmitted securely by us using encryption. This applies to your registration and customer login as well as to your order. We use the SSL (Secure Socket Layer) coding system. Although nobody can guarantee absolute protection, we protect our website and other systems against loss, destruction, access, alteration or distribution of your data by unauthorised persons through technical and organisational measures.


3.1. YOU SURF ON SNASH.COM
For what purposes do we process your data?

When you surf on our website, pages are requested from your device - based on the Internet protocol HTTP/S - and transmitted to you by our web server. If necessary, a transmission of form data, which you enter, also takes place.

In principle, you do not have to register or identify yourself for this function. However, the allocation of requests and feedback from our server is based on your IP address, which may be used to relate this data to your person.

This connection data and any form data is processed in order to enable you to surf snash.com and to realise the purpose you are pursuing (e.g. registration, information about the company, making contact, etc.).

In addition, the respective server calls are logged in a log file. We use this log file data for technical troubleshooting and to ward off and clear up illegal attacks on our systems and, if necessary, to hold responsible persons accountable. In addition, we compile evaluations from the log files stored anyway, which we use to optimise our websites. The evaluation as such takes place in anonymous form, i.e. by combining call data, so that the results are no longer personally identifiable.

Is there an obligation for you to provide your data or is this necessary for the conclusion of a contract and what happens if you decide against it?

Without the processing of the above mentioned data it is unfortunately not possible to use the snash.com website.

On what legal basis do we process your data? What are our legitimate interests?

The legal basis for any processing of your data depends on the specific purpose of your visit:

- If you visit our website to initiate contracts with us (e.g. to inform yourself about current offers) or to administer existing contracts (e.g. to administer your personal profile), the legal basis for the processing of your connection data and any form data is Art. 6 para. 1 lit. b DSGVO (initiation or implementation of a contract).

- Otherwise, processing will normally take place on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO. Our legitimate interest consists in operating a website for advertising purposes and for general information and communication purposes as well as for establishing and processing contractual relationships.

As a rule, the log file data is processed on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f DSGVO. It is our legitimate interest to protect our facilities and systems from attacks and, if necessary, to take legal action against attackers and to further develop our websites for commercial purposes.

Who is involved in the processing of my data?

In principle, the processing of your data takes place fully automatically on our server. Log files are only used by our IT department in exceptional cases (e.g. for troubleshooting or to clarify attacks) and, if necessary, passed on to public bodies such as law enforcement authorities and courts for the purpose of clarifying or prosecuting illegal attacks on our systems.

Form data is only processed by our web server (e.g. for the search function) or forwarded to internal or external recipients for the purposes of the respective function, depending on the function such as connection data. You can find more information on this under the respective functionality.

How long is my data stored?

The log file data is stored for 24 days. Connection data is deleted immediately after the HTTP/S call. Form data is stored as long as necessary for the execution of the respective action.

3.2 YOU BUY IN OUR ONLINE-SHOP
For what purposes do we process your data?

On snash.com we operate an online shop. If you order goods in our online shop, the personal contract data requested during the order and collected in the further course of the contractual relationship will be processed for the purpose of concluding and further processing the purchase contract - in particular for delivery and booking of your payment.

For the purposes of contract processing, even if you do not create a customer account, we create an internal account in our central processing system for each order or assign your order to an existing internal account. In this account we store the basic data required for contract processing,

- Contact data (surname, first name, title)

- country

- date of birth

- Optional e-mail address

- Address data and telephone number, if applicable

If you have made or are making a registration, the data stored in your account will be linked to those in your customer account (see 3.3 below).

Depending on the selected payment method (credit card, PayPal, etc.), we transmit certain information (in particular the payment amount) to the payment service provider selected by you, which in itself does not allow any reference to you. The payment service provider will process these details and may collect your data on its own responsibility. You can obtain further information from the respective service providers:

- PayPal

- amazon pay

- giropay

- VISA

- master card

- AMERICAN EXPRESS

The payment service provider chosen by you will only inform us about the execution of the payment, which we will then process for further processing of the contract.

If you make use of statutory revocation or warranty rights or contractual (warranty) rights with regard to the goods purchased from you in the online shop, we process your contract data for the purpose of processing your request. This includes in particular the examination, whether appropriate rights exist as well as if necessary a processing for the back completion of the sales contract.

We also process your contract data to comply with legal retention periods and to prevent or prosecute criminal offences against us or against you (e.g. fraud attempts, identity theft).

On what legal basis do we process your data? What legitimate interests do we pursue?

- The legal basis for the processing of your order data is Art. 6 Para. 1 lit. b DSGVO for the purposes of implementing the purchase contract (including, where applicable, rescission) or implementing pre-contractual measures.

- The legal basis for the storage of data to meet legal retention periods is Art. 6 para. 1 lit. c DSGVO in conjunction with the relevant legal retention period (in particular § 257 HGB, 147 AO).

- The legal basis for processing for the purpose of preventing or prosecuting criminal offences against us or you is Art. 6 para. 1 lit. f DSGVO. It serves our and possibly your legitimate interest in protecting our or your assets and other interests protected by criminal law.

Who is involved in the processing of my data?

- Internal departments within the framework of the handling of business processes

- On a case-by-case basis, our IT service providers within the scope of order processing

- Our logistics partners for the purpose of delivery / return of your goods

- If applicable, the payment service provider chosen by you

- If necessary, further external recipients, such as courts, to enforce our rights.

- Where appropriate, for the investigation and prosecution of criminal offences Recipients such as law enforcement authorities

As a rule, your data will not be passed on to other third parties.

How long will my data be stored?

Your contract data will be regularly deleted when the necessity for the execution of the purchase contract or a possible reversal and expiry of any further legal retention periods (e.g. up to 10 years according to the German Commercial Code or Tax Code) ceases.

Is there an obligation for you to provide your data or is this necessary for the conclusion of a contract and what happens if you decide against it?

Without the provision of the data marked as mandatory fields an order of goods in our online shop is not possible. You do not have to fill in the optional data fields. The return of the goods and the assertion of your warranty rights are also not possible without the provision of the necessary information.

3.3 YOUR SNASH.COM CUSTOMER ACCOUNT
For what purposes do we process your data?

When you create a customer account on snash.com, we process the following basic personal information,

- Contact data (surname, first name, title)

- country

- date of birth

- Optional e-mail address

- If applicable, address data and telephone number

In addition, customer account data is processed when the customer account is used. This includes in particular:

- If you have a customer account, you can note items that can be ordered in the online shop and order them later. For this purpose, data about your items stored with this function will be processed.

- With the customer account you can view and manage all past online orders, for which we process and store the relevant data.

These basic and customer account data are processed in order to provide the functionalities of the customer account, in particular to enable you to log in to the customer account as well as to conveniently order goods in the Snash Shop and to give you an overview of purchases made.

A login cookie is also used to technically enable the functionalities of the customer account. This is technically necessary in order to provide the functionality of the customer account.

We also process your basic and customer account data to comply with legal retention periods and to prevent or prosecute criminal offences against us or you (e.g. attempted fraud, identity theft).

On what legal basis do we process your data? What legitimate interests do we pursue?

The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO (fulfilment of the user contract or implementation of pre-contractual measures).

Legal basis for the storage of the data for the fulfilment of legal storage periods is if necessary art. 6 exp. 1 lit. c DSGVO in connection with the relevant legal storage period (in particular § 257 HGB, 147 AO).

The legal basis for processing for the purpose of preventing or prosecuting criminal offences against us or you is Art. 6 para. 1 lit. f DSGVO. It serves our and possibly your legitimate interest in protecting our or your assets and other interests protected by criminal law.

Who is involved in the processing of my data?

- Service providers on a case-by-case basis within the framework of order processing

- Internal departments within the framework of business process management

Your data will not be transmitted to other third parties.

How long will my data be stored?

Your basic data will be stored regularly for the duration of the customer account. You can delete your customer account at any time under [...]. However, this does not delete your order account, which may be subject to statutory retention periods (see 3.2.2).

When using the customer account, the login cookie is stored on your computer for the duration of the respective session.

Is there an obligation for you to enter your data or is this necessary for the conclusion of a contract and what happens if you decide against it?

It is not possible to set up a customer account without the provision of complete and correct basic data. It is not necessary to provide the voluntary information.

3.4 DO YOU WISH TO RECEIVE OR SUBSCRIBE TO OUR NEWSLETTER?
For what purposes do we process your data?

We are happy to inform you quickly and easily about news and offers of interest to you. For this purpose we offer you the service of our newsletter, which contains, for example, recommendations for current events in Snash or advance booking information.

By registering for the Snash Newsletter, you agree that we may use the data you provide us with and any other information stored about your customer account, as well as certain data about your use of the newsletter (usage data), to present you with personalised advertising and/or special offers and services from our or our affiliated companies.

Usage data is used in a personalized form to design individual advertising tailored to you and your interests and to send it to you. This concerns in particular the automatically generated usage data transmitted by you (e.g. confirmations of receipt and reading of e-mails, which links with which focal points of interest you clicked in the newsletters, which e-mails you open and which you do not open). This is how we want to ensure that the newsletter content is interesting for you.

On what legal basis do we process your data?

Your data will only be processed for our newsletter on the basis of your consent (Art. 6 para. 1 lit. a EU-DSGVO). You can revoke this at any time - as well as your consent to the sending of e-mails in accordance with § 7 Para. 2 No. 3 UWG.

Do you have the possibility to object to the processing of your data?

If you no longer wish to receive personalised advertising, you can revoke your consent at any time. A use of the "unsubscribe link" in the newsletter or a message in text form to the contact data mentioned in the newsletter (e.g. e-mail, fax, letter) is sufficient for this.

Who is involved in the processing of my data?

- Service providers on a case-by-case basis within the framework of order processing

- Internal departments within the framework of business process management

- Case-by-case related companies.

Your data will not be transferred to other third parties.

How long will my data be stored?

Your data will be stored until you revoke your consent to receive our newsletter.

Is there an obligation for you to enter your data or is this necessary for the conclusion of a contract and what happens if you decide against it?

You can also use our website snash.com and the other functions offered on the website without a newsletter subscription. However, if you do not subscribe to a newsletter, we will not be able to provide you with personalised product information and related information about discounts, promotions, etc.

4. WHY WE USE COOKIE TECHNOLOGIES.
Like practically every website, we use so-called cookies and similar technologies. A cookie is a small text file consisting of letters and numbers. A cookie contains information that is stored on your computer or mobile device when you visit this website for the duration of your visit (session cookies) or for a longer period of time (permanent cookies).

These cookies or comparable technologies make it possible in particular to store your user preferences or login data for the duration of one or until the next visit to the website or, for example, to offer you shopping cart or login functionalities across several pages of our website. We also use certain cookies to collect information about how visitors use our website, such as which pages are visited and how long each visit lasts. For this purpose, partly pseudonymised user profiles are created.

The above information is processed on the basis of § 15 Para. 3 TMG and Art. 6 Para. 1 lit. f DSGVO. In the latter case, the processing serves our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO to optimize our website for the promotion of our business purposes.

We require your consent to store and read the cookies on your device. If the cookies are not technically required for the services you require - which is stated in each case - you can object to the use of cookies and the associated data processing at any time as follows in accordance with § 15 Para. 3 TMG or Art. 21 Para. 1 DSGVO:

- You can make a setting in your browser that prevents cookies from being set by our website. In individual cases, however, this may also impair other functions.

- You can deactivate the cookies used by us by clicking on the banner appearing on your first page visit.

- You can click on the opt-out link of the respective service provider given below in the individual processing steps and deactivate the further use of cookies and the associated data processing there - see the "opt-out link" in the "Details" table below.

- You can download and install the Google "Opt-Out" Add-On for your browser from Google. Opt-Out-Cookies prevent the future collection of your data when visiting this and other websites by Google services. To prevent collection across devices, you must install the Opt-Out Add-On on all systems you use.

If you object, cookies will not be used and the associated data processing will not take place in the future. This has no disadvantages for the use of the website unless you also deactivate the cookie functions for technically required cookies (see above).

4.1. GOOGLE-ANALYTICS
4.1.1 DATA PROCESSING
For what purposes do we process your data?

We use the service "Google Analytics". This enables a data traffic analysis for our website (web analysis). This helps us to constantly improve the information and the structure of our website. With the help of Google Analytics, we can, among other things, evaluate which sections and subpages of our website are visited how often and for how long and from which other websites users find us.

For this purpose, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) processes on our behalf various usage data of the users of our website (e.g. in addition to the above-mentioned also which pages you call up on snash.com, how long you visit these pages in each case, how often you visit our page again) and assigns these to an anonymous code number. In addition, certain information stored in the cookie _utmz of the operator of the website from which you came to us (in particular URL of the previous page, possibly related search engine, possibly related search terms) may also be processed. Non-personalized analyses of the use of our website are created from this usage data.

On what legal basis do we process your data?

Data processing is based on Art. 6 Para. 1 lit. f) DSGVO. The processing serves the legitimate interest of our users in obtaining the best possible user experience. It also serves our legitimate business interests to optimise our website, to further improve its richness, usability and content and thus ultimately to promote our business.

Do you have an obligation to provide your information and what happens if you choose not to do so?

There is no obligation to make your usage data available for the above-mentioned purposes. You may also use the site's features if you choose not to do so.

You can object to the use of your personal data by installing the Google Anaytics "opt-out" browser plugin.

To whom is your data passed on or who is involved in the processing of my data?

Usage data is passed on to Google and automatically processed on our behalf. In principle, the evaluation options are only used internally by our IT and online marketing department.

Is your data transferred to a third country or an international organisation?

In individual cases, usage data is transmitted to Google servers in the United States of America. Google is certified according to the so-called EU-US Privacy Shield, which ensures an adequate level of data protection.

How long is your data stored?

Up to 26 months.

4.1.2     EINSATZ VON COOKIES

Im Rahmen der Nutzung von Google Analytics kommen folgende Cookies zum Einsatz:

5. CONTACT
You are very welcome to contact us in the most convenient way for you.

General enquiries
E-mail: info@snash.com
Phone number: +49 (0)221-29255899 (Mo-Do, 10:00 - 14:00)
In writing: Snash GmbH, Auenweg 173, 51063 Cologne, Germany

Questions about data protection
E-mail: datenschutz@snash.com
Phone number: +49 (0)221-29255899 (Mo-Do, 10:00 - 14:00)

In writing: Snash GmbH, Auenweg 173, 51063 Cologne, Germany

Your data will also be processed in the course of communication:

Your data will also be processed in the course of communication:

For what purposes do we process your data?

If you contact us with a request or we contact you, we will of course also process your personal data, e.g. name, address, telephone number as well as the contents of the communication for the purpose of carrying out the exchange with you.

We use these communication data in order to comply with your respective request. In addition, we process communication data in order to comply with any existing statutory retention periods.

Is there an obligation for you to provide your data or is this necessary for the conclusion of a contract and what happens if you decide against it?

Of course, there is no obligation to contact us. Of course, we can only process your requests if you provide us with sufficient information.

On what legal basis do we process your data? What legitimate interests do we pursue?

- Your data will be processed on the basis of Art. 6 Para. 1 lit. b DSGVO insofar as the exchange is connected with the initiation or fulfilment of a contract with you. This is the case, for example, with orders or queries regarding purchased goods.

- In addition, the legal basis depends on the concrete purpose of the exchange, usually Art. 6 Para. 1 lit. f DSGVO (our legitimate interest to conduct business correspondence and e.g. to answer inquiries on data protection and to fulfil your rights under No. 9) will be relevant.

- Insofar as further processing is carried out to meet a statutory retention period, the legal basis is 6 para. 1 lit. c DSGVO in conjunction with the relevant statutory retention periods (in particular §§ 257 HGB, 147 AO).

Who is involved in the processing of my data?

- The department responsible for your inquiry.

- If applicable, our IT service providers within the scope of order processing.

- Possibly affiliated companies, as far as the request refers to them (e.g. snash).

How long is your data stored?

Communication data is deleted if it is no longer required for exchange with you and any legal retention periods have expired. This is usually the case for business correspondence such as e-mails six years after the end of the year in which it was received.



6. YOUR RIGHTS
Insofar as we process your data, you have the right, to the extent permitted by law, to

Information, in particular about data stored with us and their processing purposes (Art. 15 EU-DSGVO)

Correction of incorrect data or completion of incomplete data (Art. 16 EU-DSGVO)

Deletion, such as unlawfully processed or no longer necessary data (Art. 17 EU-DSGVO)

Restriction of processing (Art. 18 EU-DSGVO)

Objection to the processing if it is carried out to safeguard the legitimate interests of the controller (Art. 21 EU-DSGVO) and

Data transmission if the processing is based on consent or is carried out for the execution of a contract or with the aid of automated procedures (Art. 20 EU-DSGVO)

If a processing is based on a consent given by you (Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a), you have the right to revoke the consent at any time. The lawfulness of the processing carried out on the basis of the consent until your revocation is not affected by this.

Furthermore, you have the possibility to address complaints to the competent supervisory authorities. For Nightlife Management GmbH this is the State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia, Postfach 200444, 40102 Düsseldorf poststelle@ldi.nrw.de