Privacy Policy

Section 1 Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:

Sellectro UG (haftungsbeschränkt)
Karl Marx Straße 1 (Oderturm)
15230 Frankfurt (Oder)
Germany
Email: info@gianquest.com
Website: www.gianquest.com

If you have any questions about data protection, you can reach us at the email address above.

Section 2 Principles of Data Processing

We collect and process personal data only to the extent necessary to provide our services or where you have given us your consent. Processing always takes place in accordance with the GDPR and the relevant provisions of the BDSG.

Section 3 Data Collected and Legal Basis

3.1 Order Processing

When you place an order, we collect your name, delivery address, email address, phone number, payment details, and order history.

Legal basis: Article 6(1)(b) GDPR (performance of a contract). This data is required to process your order. Tax relevant data is additionally retained for 10 years on the basis of Article 6(1)(c) GDPR (statutory retention obligation).

3.2 Customer Account

If you create a customer account, we collect your email address, password (encrypted), name, and address details.

Legal basis: Article 6(1)(b) GDPR (performance of a contract). Account data is stored until the account is deleted, unless statutory retention obligations require longer storage.

3.3 Email Marketing and Newsletter

If you sign up for our newsletter, we collect your email address and, optionally, your first name and product preferences.

Legal basis: Article 6(1)(a) GDPR (consent). You can withdraw your consent at any time by clicking the unsubscribe link in any email or by contacting us at info@gianquest.com. Newsletter data is stored until consent is withdrawn. Transactional emails, such as order confirmations and shipping notifications, are sent on the basis of Article 6(1)(b) GDPR.

3.4 Contacting Us

If you contact us by email or through our contact form, we collect your name, email address, and the content of your message.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in handling customer inquiries) or Article 6(1)(b) GDPR where the inquiry relates to a contract. Contact data is deleted once your inquiry has been fully handled, and no later than after 3 years.

3.5 Website Analysis and Tracking

When you visit our website, technical data is collected, including an anonymized IP address, browser type, operating system, pages visited, time spent on the site, and referral source.

Legal basis: Article 6(1)(a) GDPR (consent given through the cookie banner) for non essential cookies and tracking technologies. Essential cookies that are technically necessary to operate the shop are processed on the basis of Article 6(1)(f) GDPR (legitimate interest). Analytics data is automatically deleted after 14 months.

Section 4 Processors and Third Party Recipients

We only share your data with third parties where this is necessary to fulfill a contract, where you have given your consent, or where we are legally required to do so. The following service providers may receive access to your data as part of order processing:

Our e-commerce platform provider, which operates the online shop and processes order data, customer account data, and payment processing data.

Payment service providers, which process payment data, name, and email address in order to complete your transaction.

Shipping partners, which receive your name, delivery address, and phone number where necessary, in order to deliver your order.

Analytics and marketing tool providers, where applicable, which may process anonymized usage data for the purposes described in Section 3.5.

Section 5 Cookies and Tracking Technologies

Our website uses cookies and similar technologies. When you first visit our website, you will be asked for your consent through our cookie banner.

Essential cookies, which do not require consent, are necessary for the technical operation of the shop, for example for the shopping cart, login, and language settings. Legal basis: Article 6(1)(f) GDPR.

Analytics cookies, which require consent, are used to analyze user behavior on our website. The IP address is anonymized in this process. Storage duration: up to 14 months.

Marketing cookies, which require consent, may be used for remarketing purposes and to measure the effectiveness of our advertising.

You can adjust your cookie settings at any time through the cookie settings link at the bottom of our website, or disable cookies in your browser. Please note that disabling certain cookies may limit the functionality of our website.

Section 6 International Data Transfers

Where any of our service providers process data outside the European Economic Area, such transfers are carried out on the basis of Standard Contractual Clauses approved by the European Commission in accordance with Article 46(2)(c) GDPR. Copies of the relevant Standard Contractual Clauses can be requested from us.

Section 7 Your Rights

As a data subject, you have the following rights in relation to your personal data:

Right of access (Article 15 GDPR): you have the right to obtain confirmation as to whether we process personal data concerning you, and to receive information about that data.

Right to rectification (Article 16 GDPR): you have the right to request the correction of inaccurate personal data or the completion of incomplete data.

Right to erasure (Article 17 GDPR): you have the right to request the deletion of your personal data, provided the legal requirements are met.

Right to restriction of processing (Article 18 GDPR): you have the right to request that we restrict the processing of your data, for example if you dispute its accuracy.

Right to data portability (Article 20 GDPR): you have the right to receive your personal data in a structured, commonly used, and machine readable format, and to transmit that data to another controller.

Right to object (Article 21 GDPR): you have the right to object at any time, for reasons relating to your particular situation, to the processing of your data based on Article 6(1)(f) GDPR. In the case of direct marketing, you may object at any time without giving reasons.

Right to withdraw consent: where processing is based on your consent under Article 6(1)(a) GDPR, you have the right to withdraw that consent at any time with future effect.

To exercise your rights, please contact us at info@gianquest.com. We generally respond to requests within 30 days.

Section 8 Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. In Germany, you can contact the data protection authority of your federal state. Because Sellectro UG (haftungsbeschränkt) is based in Brandenburg, the relevant supervisory authority is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg.

Section 9 Data Security

We use technical and organizational security measures to protect your data against loss, destruction, manipulation, and unauthorized access. Our website uses SSL/TLS encryption for data transmission. Access to personal data is limited to authorized staff.

Section 10 Changes to This Privacy Policy

We reserve the right to update this Privacy Policy in order to adapt it to changes in the law or changes to our services. The current version is always available on our website.