1. general information

The following statement provides information about the collection of personal data when using our website https://ios-clothing.com. Personal data means any information relating to an identified or identifiable natural person, such as name, address, e-mail addresses, date of birth, physical characteristics, etc.

a. Responsible
Responsible for the website http://www.ios-clothing.com is

IOS by MAICA GmbH
Gutenbergstraße 20
30823 Garbsen
E-mail address: info@ios-clothing.com
Website: http://www.ios-cothing.com
Contact person: Maximilian Höpfner

hereinafter referred to as MAICA.

b. Legal basis for the processing of personal data
- Insofar as the user's consent is obtained for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

- When processing personal data that is necessary for the performance of a contract to which the user is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis; the same applies to processing operations that are necessary for the implementation of pre-contractual measures.

- Insofar as the processing of personal data is necessary to fulfill a legal obligation to which MAICA is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

- In the event that vital interests of the user or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

- If the processing is necessary to safeguard a legitimate interest of MAICA or a third party and if the interests, fundamental rights and freedoms of the user do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing. This also applies to the temporary storage of personal data (see below).

c. Deletion of data and storage duration
The user's personal data will be deleted or blocked as soon as the purpose of storage no longer applies. By way of exception, this does not apply if the European or national legislator provides for the retention of data in EU regulations, laws or other provisions to which the controller is subject; in this case, the user's personal data will be deleted once the retention obligation no longer applies.

2. collection of personal data

a) Data collection without the user's involvement
MAICA collects the following information from a user of the website http://www.maica.de, which the user's browser transmits without the user's involvement, i.e. without the user registering or otherwise manually transmitting information to MAICA through a personal action. This data is not assigned to specific persons. This data is not merged with other data sources, and the data is deleted after a statistical evaluation. The legal basis for the collection of personal data without the involvement of the user is Art. 6 para. 1 lit. f GDPR. MAICA's legitimate interest arises from the need to continuously display a stable and secure website to the user.

aa) Browser data
The following data is only temporarily stored by MAICA and deleted after a purely statistical evaluation:

- Type and version of the browser

- Operating system of the computer used

- the address of the previously visited website (referrer URL)

- the address of the accessing computer (IP address)

- Date and time of the visit

- Content of the request (specific page)

- access status/HTTP status code

- amount of data transferred

ab) Cookies
When using a website such as http://www.maica.de, cookies may be used. Cookies are small text files that are stored on the user's hard disk and assigned to the browser used and through which certain information is transmitted to the controller. This enables the browser to be uniquely identified when the website is called up again. Cookies cannot execute programs or transmit viruses to the user's computer. They are used to make the website more user-friendly and effective overall. The user has the option of configuring his browser settings to reject cookies at any time. However, MAICA would like to point out that the user may not be able to use all the functions of a website to their full extent if they make such a setting.

The legal basis for the use of cookies necessary for the functions of the website (e.g. for the use of the shopping cart or log-in information) results from Art. 6 para. 1 lit. f GDPR. If the user has given their consent to the use of cookies, the legal basis is Art. 6 para. 1 lit. a GDPR.

The purpose is to recognize the user's browser so that the user does not have to repeat user actions and entries that are intended for the MAICA server (e.g. electronic shopping cart, login data).

The cookies are deleted as shown below:

(1) Transient cookies
Transient cookies are automatically deleted when the user logs out or closes their browser. These include, in particular, so-called session cookies, which store a session ID that can be used to assign various requests from a user's browser to the shared session so that the computer can be recognized when the user returns to the website. MAICA does not use transient cookies.

(2) Persistent cookies
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie used. MAICA does not use persistent cookies.

(3) Third-party cookies
Third-party providers also use transient or persistent cookies. No third-party cookies are set on http://www.maica.de.

b) Data collection with the cooperation of the user
MAICA also collects information from a user of the website http://www.maica.de that the user manually transmits to MAICA himself by registering or by any other personal action. This data is assigned to the user and passed on to third parties who are involved in the fulfillment of the contract at the instigation of MAICA (e.g. shipping companies or financial service providers in the case of a purchase on account). Such data is technically necessary for MAICA to send the user a newsletter requested by him, to reply to him after contacting him, if desired, or to fulfill a contract concluded with the user and, if applicable, to fulfill existing warranty claims.

Contact form

The MAICA website http://www.maica.de contains a contact form that can be used by the user to make contact electronically. The data is entered via an input mask and transmitted to MAICA and stored. The following data is collected when the contact form is used

Name

address

Telephone/fax number

e-mail address

In addition, the following information is stored at the time of data entry:

Date and time of registration

IP address of the accessing computer

The legal basis for data collection is Art. 6 para. 1 lit. a GDPR. The user's consent to the processing of this data is obtained during the sending process and reference is made to this declaration. The data will not be passed on to third parties and will only be used to process the conversation.

The purpose of data collection is to respond to the user after contact has been made.

The data will be deleted as soon as the conversation with the user has ended, i.e. the matter in question has been conclusively clarified.

3. use of third-party services with data collection

a) Facebook
MAICA uses the so-called "Like" button of the social network http://www.facebook.com on this website. The Facebook "Like" button consists of a symbolized raised thumb and/or a white "f" on a dark background. The Facebook network is operated by the US company Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304.

If the user calls up a website with their Internet browser (e.g. Firefox) that integrates the "Like" button as a so-called plug-in, a direct connection to the servers of Facebook Inc. is established. The content of the plug-in is transmitted by Facebook Inc. directly to the user's browser, which integrates it into the website in question. Facebook Inc. obtains the information via the plug-in that the user has accessed the respective website and - if the user is logged into their Facebook member account at the same time - assigns this information to this member account. Facebook Inc. receives further information about the user's personal preferences regarding Internet content if the user clicks on the "Like" button below or next to the respective Internet content. Facebook Inc. stores such data about the user's behavior.

If the user does not agree with the assignment of the data collected about his visit to the website http://www.maica.de to his Facebook profile by Facebook Inc., he must log out of his Facebook member account before accessing the web pages of the MAICA website. The user can find additional information on the purpose and scope of data collection and the subsequent use and processing of user data by Facebook Inc. as well as on rights and setting options to protect privacy in the data protection declarations of Facebook Inc. at https://de-de.facebook.com/policy.php.

The legal basis for the use of the Facebook "Like" button results from Art. 6 para. 1 lit. a GDPR.

The purpose of data collection is to support the user's communication behavior.

The anonymous data is deleted by Facebook after the deletion periods specified there.

b) Instagram
MAICA uses the plug-in for the social network service Instagram on the website http://www.maica.de by means of the Instagram button. This network is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. If the user presses the Instagram button while logged into their Instagram member account, content from the website http://www.maica.de can be linked to the user's Instagram profile and the information about the user's visit is assigned to their Instagram member account. If the user does not agree to the collection of data about his or her behavior or person by Instagram or Facebook Inc., he or she can log out of his or her Instagram account before accessing the MAICA website. The specific use of user data by the Instagram service can be found in their privacy policy at https://help.instagram.com/155833707900388.

The legal basis for the use of the Instagram button is Art. 6 para. 1 lit. a GDPR.

The purpose of data collection is to support the user's communication behavior.

The deletion of the anonymous data takes place on the Facebook side after the deletion periods specified there.

c) Google Maps
MAICA uses the Google Maps service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on the website http://www.maica.de. Google Maps is a web service for displaying interactive (land) maps in order to visualize geographical information. By using this service, the user is shown the location of MAICA and any directions are made easier.

Information about the use of the MAICA website (such as the IP address) is transmitted to Google servers in the USA and stored there as soon as the subpages in which a Google Maps map is integrated are accessed. This takes place regardless of whether Google provides a user account through which the user is logged in. If the user is logged in to Google, their data is assigned directly to their account. If the user does not wish to be associated with their Google profile, they must log out of their Google user account before activating the button.

Google stores the user's data - even for users who are not logged in - as usage profiles and analyzes them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit.f GDPR on the basis of Google's legitimate interests in the display of personalized advertising, market research and/or demand-oriented design of its website. The user has the right to object to the creation of such user profiles, whereby the user must contact Google to exercise this right.

Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU.

If the user does not agree to the future transmission of their data to Google when using Google Maps, it is also possible to completely deactivate the Google Maps web service by switching off the JavaScript application in their browser. Google Maps and thus also the map display on the website http://www.maica.de can then not be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html and the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html. Detailed information on data protection in connection with the use of Google Maps can be found on the Google website: https://www.google.de/intl/de/policies/privacy/.

4 Rights of the data subject/user

The user has the following rights with regard to his personal data at any time, the exercise of which is free of charge for the user:
a) Information
The user has the right to request information about the data stored about him by MAICA at any time.

b) Correction
In the event that the user's data has been stored incorrectly or incompletely, the user has the right to demand that MAICA corrects and/or completes it. MAICA shall notify all recipients to whom personal data has been disclosed by the user of any rectification of personal data or restriction of processing, unless this proves impossible or involves a disproportionate effort. MAICA will inform the user of these recipients if the user so requests.

c) Restriction of processing
The user may request the restriction of the processing of his data if the accuracy of the data collected is disputed, the processing is unlawful or the purpose of the processing is fulfilled, but the user still needs his data for the assertion, exercise or defense of legal claims.

d) Deletion
The user can request the deletion of his data if there is no legal basis, in particular no legitimate reasons for the processing, or if these are not subject to a retention obligation. MAICA will inform all recipients to whom personal data has been disclosed by the user of any deletion of personal data or restriction of processing, unless this proves impossible or involves a disproportionate effort. MAICA will inform the user of these recipients if the user so requests.

e) Objection
The user can object to the processing of their personal data at any time; processing will then no longer take place unless MAICA can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the user, or the processing serves to assert, exercise or defend legal claims of MAICA.

f) Revocation
If the user's personal data is processed for a specific purpose on the basis of their consent, they can revoke this consent at any time. The data processing remains lawful until the time of revocation.

g) Right to lodge a complaint
Users have the right to lodge a complaint with the supervisory authority if they believe that the processing of their personal data is unlawful. The complaint should be addressed to:

The State Commissioner for Data Protection of Lower Saxony

Address:

P.O. Box 221, 30002 Hanover

Brühlstraße 9, 30169 Hanover

Telephone: 0511/120-4500

Fax: 0511/120-4599

E-mail: poststelle@lfd.niedersachsen.de

Internet: https://www.lfd.niedersachsen.de

h) Right to data portability
The user has the right to have the data provided to the controller in accordance with section 1.a) transferred to a third party in a structured, commonly used and machine-readable format. In addition, the user has the right to transfer this data held by MAICA to another controller without hindrance from MAICA, if

a) the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and

b) the processing is carried out by automated means.

In exercising the right to data portability, the user has the right to have the personal data transmitted directly from MAICA to another controller, where technically feasible.

The right to data portability does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

j) Exercising the rights
If the user intends to exercise the aforementioned rights, he/she is requested to contact the controller by post, fax or e-mail at the addresses given in Section 1.a).