Privacy

The following information on data protection informs you about the nature, scope and purposes of the collection and use of personal data when using this website and about your rights.

I. Person responsible for data processing (hereinafter: "we")

Kuja-Network UG
Managing Directors:
Bernhard Kurtz and Nico Jahnke
Hellenbergstrasse 20
41569 Rommerskirchen
Tel: +49 (0) 30 922 802 01
Email: info@kuja-network.com

Further details can be found in our provider identification (imprint).

Kuja-Network UG (haftungsbeschränkt) is the one registered entrepreneurial company, which includes the websites kuja-network.com, grading-universe.com and movie-props-universe.com. If kuja-network is mentioned in the following, the three websites mentioned above are included.

II. Personal data, purposes of their processing and legal bases

Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the identity of that natural person.

Personal data is processed on our website when it is necessary for the following purposes:

for the use of the website (legal basis: Article 6(1), first subparagraph, point b of the General Data Protection Regulation - hereinafter: DSGVO),
to protect our interest in improving the user experience, advertising our services and maintaining the security of use (legal basis: Article 6(1), first subparagraph, point (f) of the GDPR),
for the use of the services offered on the website as well as for pre-contractual measures, in particular for your inquiries, for example (legal basis: Article 6(1), subparagraph 1(a) and/ or Article 6(1), subparagraph 1(b) DSGVO),
for the conclusion and performance of a contract (legal basis: Article 6(1), first subparagraph, point (b) DSGVO) and/or
to comply with a legal obligation to which we are subject (such as tax law requirements and retention obligations, legal basis: Article 6(1), first subparagraph, point c DSGVO).

Further details on the processing of data can be found below under appropriate headings:

1. Access data/server log files

When you visit our website, the servers of our website hoster automatically store the information that your browser sends, so-called server log files. The information includes the following:

The IP address of the requesting terminal device,
The date and time of the call of our web pages,
Indication of the time difference between the requesting host and the web server,
content to the request or indication of the retrieved file that was transmitted to the user
the access status (successful transmission, error, etc.),
the amount of data transferred in each case in bytes,
the website from which the user accessed,
the browser used by the user, the operating system, the interface, the language of the browser and the version of the browser software.

The temporary processing of this data by the system is necessary to enable delivery of the website to your terminal device. For this purpose, the IP address in particular must remain stored for the duration of the session. A combination of this data with other data sources does not take place. The information is used exclusively to control our own website traffic and to maintain the technical operation of the servers and the network of our hosters, including the prevention of abuse. The legal basis for this is Article 6 (1) subparagraph 1 letter f DSGVO.

2. Cookies

Our websites sometimes use so-called cookies, but very cautiously and only those that are absolutely necessary so that we can provide you with the websites you have accessed.

As a user, you can influence the use of cookies. Most browsers have an option with which the storage of cookies is limited or completely prevented. However, it is pointed out that the use and especially the user comfort will be limited without cookies.

Instructions for the most common browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/Cookies-blockieren
Google Crome: https://support.google.com/accounts/answer/61416?hl=de
Apple Safari: https://support.apple.com/de-at/HT201265
Microsoft Edge: https://support.microsoft.com/de-de/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy

Please note that for you, our website will not function as intended without the cookies used.

3. Comments, Evaluations and Contributions

If you leave personal comments on our website, for example in the comment functions of the showroom and media areas or in other posts, your IP address and your specified e-mail address associated with their account on Kuja-Network UG (haftungsbeschränkt) are stored. This is done for our own safety and for the safety of the members of Kuja-Network UG (haftungsbeschränkt), in order to be able to prosecute criminal content (unauthorized political propaganda, insults, derogatory public statements, etc.) in comments and posts. Since we as the operator of the platform can be prosecuted for the comment or post, we are therefore interested in such cases even the identity of the author to take legal action.

4. Contact via e-mail or contact form

If you send us inquiries via e-mail or contact form, your information from this, including the data you provide there, will be processed for the purpose of processing the request and, if necessary, for the case of follow-up questions. The legal basis for this is Article 6 (1) subparagraph 1 letter b DSGVO.

5. User account

In the context of contract initiation within our Trading Place, we process data of our customers in order to enable them to select and initiate the contract for the selected products together with their payment and delivery.

For this purpose, a user account must be created, in which users can view their inquiries in particular. The required mandatory entries are communicated to users as part of the registration process. User accounts are generally not public and not indexed by search engines.

The processed data includes inventory data, communication data, contract data, payment data. Here we use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.

The processing is carried out on the basis of Art. 6 para. 1 sentence 1 b of the Basic Data Protection Regulation. In this context, the information marked as required is necessary for the justification and fulfillment of the contract.

6. Integration of services and content of third parties

It may happen that third-party content from other websites is integrated within our online offer. This always requires that the providers of this content (hereinafter referred to as "third-party providers") perceive the IP address of the user. This is because without the IP address they would not be able to send the content to the browser of the respective user. The IP address is thus necessary for the display of this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may store the IP address for statistical purposes, for example.

III. Recipients of personal data and third country transfers

Personal data is disclosed to the following categories of recipients:

Our employees as well as our order processors, namely the hoster of our website Strato AG, Pascalstraße 10, 10587 Berlin (https://www.strato.de/impressum/) and, if applicable, individual named service providers when using the website, see above under II. 5.

In addition, your personal data will not be disclosed to third parties without your express consent, unless we are required to do so by law or the disclosure of data is mandatory for the performance of a contractual relationship.

We only process your personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) if it is necessary for the fulfillment of our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. The same applies, for processing by third parties on our behalf, the disclosure of your personal data to third parties as well as its transfer to third parties. Service providers that process personal data on our behalf in a third country are furthermore only used if an "adequacy decision" of the European Commission (Article 45 GDPR) exists for this third country, "appropriate safeguards" (Article 46 GDPR) or "internal data protection rules" (Article 47 GDPR) are in place at the recipient. General information on adequacy decisions can be found at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_de, on appropriate safeguards at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_de and on internal data protection rules at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/binding-corporate-rules_de. For more information, you can contact us.

IV. Duration of storage

We delete personal data immediately after the purpose has been achieved and the legal basis no longer applies, as well as in the absence of a retention obligation.

Saved server log files and IP addresses are automatically deleted after seven days at the latest.

Session cookies are automatically deleted after the session ends. In addition, cookies are stored on your terminal device with an expiration date, and you also have control over the use and deletion of cookies, see above

We process personal data from your inquiries via e-mail or contact form until your inquiry is fully processed and completed. After that, the information will be deleted. Please note, however, that due to a legal transaction with you for certain data commercial and tax law retention obligations of at least six (§ 257 HGB) or ten (§147 AO) years may exist, which may also apply to the content of contact inquiries and e-mails.

We process your data transmitted to us within user accounts until any contract initiations via our Trading Place have been fully processed and settled. Transmitted data within the use of a user account we delete after termination of the corresponding user account.

Furthermore, we check on an annual basis whether data can be deleted. This is the case when the purpose of processing and the requirements of the legal basis for processing have ceased to exist and there is no longer a legal obligation to retain the data.

V. Provision of personal data and rights of data subjects

You are not required by law to provide personal data. However, the provision may be necessary for the conclusion of a contract or for functions of the website. Thus, if not provided, a contract or a function on the websites may not be offered. There is no automated decision-making on the websites; profiling does not take place.

The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 DSGVO and from §§ 32 to 37 Bundesdatenschutzgesetz-neu.

You have the right against us with regard to the personal data concerning you if the legal requirements are met

Information, Article 15 DSGVO,

Rectification, Article 16 DSGVO,

Deletion, Article 17 GDPR,

Restriction of processing,Article 18 GDPR,

Transferability,Article 20 GDPR.

If you have given consent to the processing of personal data, you have the right of

revocation, Article 7 DSGVO,

with effect for the future.

You also have the right to object to the processing of personal data

Objection, Article 21 DSGVO

to object, see further information separately below under VI.

Please address all inquiries, requests and notifications to us, see above under I.

If you believe that the processing of personal data concerning you is in breach of data protection law, you always have the

right to lodge a complaint

to the competent supervisory authority, cf. Article 77 DSGVO. Without prejudice to any other administrative or judicial remedy, you have this right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The contact details of the data protection officers in the federal states, the supervisory authorities for the non-public sector, broadcasting, churches, in Europe and the rest of the world, as well as the Virtual Data Protection Office can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.

VI. Information about right of objection according to Article 21 DSGVO

1. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1), first subparagraph, point (f) of the DSGVO (data processing based on a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

2. If personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of data concerning you for the purpose of such marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made form-free and should preferably be directed to us, see above under I.

Registration