top of page

data protection

Controller responsible for data processing

Smart Listings SL
Calle Alejandro Dumas 17, Entresuelo
29004 Malaga
Spain

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below you’ll find detailed information about how we handle your data.

1. Access data and hosting

You can visit our website without providing any personal details. Each time a page is accessed, the web server automatically stores a so-called server log file that documents the request (e.g., name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider — “access data”).

We evaluate these access data solely to ensure trouble-free operation of the site and to improve our offering. This serves our legitimate interests in presenting our offering correctly within the meaning of Art. 6(1) sentence 1 lit. f GDPR. All access data are deleted no later than seven days after your visit ends.

Hosting services by a third party
As part of processing on our behalf, a third-party provider supplies hosting and website display services for us. This serves our legitimate interests in correctly presenting our offering. All data collected via this website or in online-shop forms as described below are processed on that provider’s servers. Processing on other servers takes place only as explained here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data collection and use for contract processing

We collect personal data when you provide it to us voluntarily as part of placing an order or contacting us (e.g., via contact form or email). Required fields are marked as such because we need these data to process the contract or handle your inquiry; without them you cannot submit the order or inquiry. Which data are collected is evident from the respective input forms.

We use the data you provide pursuant to Art. 6(1) sentence 1 lit. b GDPR to process the contract and handle your requests. If you give consent under Art. 6(1) sentence 1 lit. a GDPR by choosing to open a customer account, we also use your data for that purpose. After the contract has been fully performed or your customer account has been deleted, your data will be restricted for further processing and deleted after expiry of statutory tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, as permitted by law and explained in this notice. You can delete your customer account at any time by contacting us via the method below or via the function provided in the customer account.

3. Data sharing

To fulfill the contract pursuant to Art. 6(1) sentence 1 lit. b GDPR, we share your data with the shipping company commissioned with the delivery, insofar as this is necessary to deliver the ordered goods. Depending on which payment service provider you select during the order process, we pass on the payment data collected for payment processing to the credit institution handling the payment and, where applicable, to payment service providers we have commissioned or to the selected payment service. In some cases, the selected payment service providers also collect these data themselves if you open an account with them. In that case, you must log in to the payment service provider during the order process with your access data. The privacy policy of the respective payment service provider applies.

For order and contract processing, we also use an external merchandise management system. The data transfer/processing in this respect is based on a data processing agreement.

The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle shipping for us (drop shipping).

4. Email newsletter

Email advertising with newsletter subscription
If you subscribe to our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

You can unsubscribe at any time, either by contacting us via the method below or via a link provided in every newsletter. After you unsubscribe, we delete your email address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, as permitted by law and explained here.

5. Cookies and web analytics

To make visiting our website attractive, enable certain functions, display suitable products, or conduct market research, we use so-called cookies on various pages. This serves our legitimate interests in an optimized presentation of our offering pursuant to Art. 6(1) sentence 1 lit. f GDPR. Cookies are small text files stored automatically on your device. Some cookies are deleted after the browser session ends (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can find the storage duration in your browser’s cookie settings.

You can set your browser to inform you about the use of cookies, decide individually whether to accept them, or exclude acceptance for specific cases or in general. Each browser manages cookie settings differently. See the help menu for instructions:

If you do not accept cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analytics
If you have given your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, this website uses Google (Universal) Analytics, a web analytics service of Google LLC (www.google.de), for website analysis. Google (Universal) Analytics uses methods such as cookies to analyze your use of the website. The information collected automatically about your use of this website is generally transmitted to and stored on a Google server in the USA. IP anonymization is activated on this website, so your IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. After the purpose no longer applies and we end the use of Google Analytics, the data collected in this context will be deleted.

Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can withdraw your consent at any time with effect for the future by downloading and installing the browser plugin available at http://tools.google.com/dlpage/gaoptout?hl=de. This prevents the collection of data generated by the cookie relating to your use of the website (including your IP address) and the processing of this data by Google.

As an alternative to the browser plugin, you can click this link to prevent collection by Google Analytics on this website in the future. This places an opt-out cookie on your device. If you delete your cookies, you will be asked again to give your consent.

6. Online marketing

Google AdWords Remarketing
We advertise this website in Google search results and on third-party websites via Google AdWords. If you have given us your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, the Google remarketing cookie will be set when you visit our website. It automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. After the purpose no longer applies and we end the use of Google AdWords Remarketing, the data collected in this context will be deleted.

Further data processing only occurs if you have agreed to Google linking your web and app browsing history with your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. To do this, your personal data are temporarily linked by Google with Google Analytics data to form audiences.

Google AdWords Remarketing is an offering of Google LLC (www.google.de).
Google LLC is headquartered in the USA and certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can withdraw your consent at any time with effect for the future by deactivating the remarketing cookie via this link. You can also learn more about cookies and adjust settings via the Digital Advertising Alliance.

7. Social media plugins

Use of social plugins from Facebook and Instagram via the Shariff solution
Our website uses social buttons from social networks.

This serves our legitimate interests in optimal marketing of our offering pursuant to Art. 6(1) sentence 1 lit. f GDPR. To enhance the protection of your data when you visit our site, these buttons are not integrated as unrestricted plugins but only as HTML links. This ensures that when a page of our website containing such buttons is called up, no connection is established with the servers of the respective social network provider.

If you click one of the buttons, a new browser window opens and the page of the respective service provider is called up, where you can (after entering your login data if necessary) click e.g. the Like or Share button.

For the purpose and scope of data collection and the further processing and use of data by the providers on their pages, as well as contact options and your related rights and settings to protect your privacy, please see the providers’ privacy notices:

http://www.facebook.com/policy.php
https://help.instagram.com/155833707900388

Our online presence on Facebook and Instagram
Our presence on social networks and platforms serves better, active communication with our customers and prospects. We provide information there about our products and ongoing promotions.

When visiting our social-media presences, your data may be collected and stored automatically for market research and advertising purposes. Using pseudonyms, so-called usage profiles are created from these data. These can be used, for example, to place ads inside and outside the platforms that presumably match your interests. Cookies are usually used on your device for this purpose, storing user behavior and interests. This serves, pursuant to Art. 6(1) lit. f GDPR, to safeguard our legitimate interests in an optimized presentation of our offering and effective communication with customers and prospects. If the social-media platform operators ask you for consent to data processing (e.g., via a checkbox), the legal basis is Art. 6(1) lit. a GDPR.

If the above platforms are headquartered in the USA, the following applies: For the USA there is an adequacy decision of the European Commission based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.

For detailed information on the processing and use of data by the providers on their pages, as well as contact options and your rights and settings to protect your privacy (in particular opt-out options), please refer to the providers’ privacy notices linked below. If you need help, you can contact us.

Facebook: https://www.facebook.com/about/privacy/
Processing is carried out on the basis of a joint controllership agreement under Art. 26 GDPR, which you can view here:
https://www.facebook.com/legal/terms/page_controller_addendum

Instagram: http://instagram.com/about/legal/privacy/

Opt-out options:
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: http://instagram.com/about/legal/privacy/

8. Sending review reminders by email

If you have expressly consented during or after your order pursuant to Art. 6(1) sentence 1 lit. a GDPR, we use your email address to remind you to submit a review of your order via the review system we use. You can withdraw this consent at any time by contacting us via the method below.

9. Contact options and your rights

As a data subject, you have the following rights:

  • Art. 15 GDPR — the right to obtain information about your personal data processed by us, to the extent described therein;

  • Art. 16 GDPR — the right to request without undue delay the rectification of inaccurate or completion of your personal data stored by us;

  • Art. 17 GDPR — the right to request the erasure of your personal data stored by us, unless further processing is required

    • for exercising the right of freedom of expression and information;

    • for compliance with a legal obligation;

    • for reasons of public interest; or

    • for the establishment, exercise, or defense of legal claims;

  • Art. 18 GDPR — the right to request restriction of processing of your personal data where

    • the accuracy of the data is contested by you;

    • the processing is unlawful but you oppose the erasure;

    • we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or

    • you have objected to processing pursuant to Art. 21 GDPR;

  • Art. 20 GDPR — the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request transmission to another controller;

  • Art. 77 GDPR — the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence or place of work or of our registered office.

For questions about the collection, processing, or use of your personal data, for information, rectification, restriction, or erasure of data, as well as withdrawal of consent granted or objection to a particular data use, please contact us directly using the contact details in our legal notice (Impressum).

Right to object

Where we process personal data as explained above to safeguard our legitimate interests within a balancing of interests, you may object to this processing with effect for the future. If processing is for direct marketing purposes, you may exercise this right at any time as described above. Where processing is for other purposes, you have a right to object only on grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms, or where processing serves the establishment, exercise, or defense of legal claims.

This does not apply if processing is for direct marketing purposes. In that case, we will no longer process your personal data for such purposes.

bottom of page