<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
Europe Pen GmbH<\/strong> This policy applies to all sites and online profiles referencing it (the \u201cwebsites\u201d). Our services are aimed exclusively at business customers (B2B), associations, and public bodies.<\/p>\n\n\n\n We collect only the data necessary to initiate, perform, and complete<\/strong> contracts. Additional fields are marked as voluntary<\/strong>; not providing them has no adverse effects but may delay processes.<\/p>\n\n\n\n National references:<\/strong> If we obtained your e-mail in connection with a sale, we may send occasional<\/strong> e-mails about similar<\/strong> products\/services. Legal basis: Art. 6(1)(f) GDPR<\/strong> together with Art. 21 LSSI-CE (Spain)<\/strong> and Art. L34-5 CPCE (France)<\/strong>. You can object at any time<\/strong> via the unsubscribe link in each e-mail or by contacting privacy@europe-pen.com<\/strong><\/p>\n\n\n\n We share data only where a legal basis exists. Typical recipients include:<\/p>\n\n\n\n We conclude data processing agreements<\/strong> (Art. 28 GDPR). Transfers to third countries<\/strong> (if any) rely on appropriate safeguards such as EU Standard Contractual Clauses<\/strong>. We may process data provided by customers (e.g., delivery\/recipient data, print content) or drawn from public registers\/credit agencies<\/strong> (e.g., commercial register, mediaFinanz<\/strong>) where needed for fulfilment or risk assessment.<\/p>\n\n\n\n Data are stored only as long as necessary<\/strong> for the respective purpose. Statutory retention periods (e.g., under German HGB\/AO) apply. We may retain data to assert\/defend claims within limitation periods (generally 3 years, up to 30 years in exceptional cases).<\/p>\n\n\n\n We apply appropriate technical and organisational measures<\/strong>. Data in transit are encrypted (HTTPS)<\/strong>. Alternative channels (e.g., post) are available.<\/p>\n\n\n\n Certain data are required<\/strong> for registration, orders, processing, billing, or use of our services. Without them, handling may not be possible.<\/p>\n\n\n\n We do not<\/strong> conduct solely automated<\/strong> decision-making within Art. 22 GDPR.<\/p>\n\n\n\n a) IP \/ security logs<\/strong> \u2013 To prevent and analyse attacks, we store your browser-transmitted IP for up to 7 days<\/strong>, then delete\/anonymise it. Basis: Art. 6(1)(f) GDPR<\/strong>. We use the consent tool of CookieYes Limited, 3 Wellington Place, Leeds, LS1 4AP, United Kingdom<\/strong> to collect, manage, and document<\/strong> your consents. With your consent, we use Google Analytics<\/strong> for reach measurement and statistics. Cookies are set; usage data are processed; IPs are anonymised<\/strong>. Basis: Art. 6(1)(a) GDPR<\/strong>. Consent can be withdrawn via the consent tool at any time.<\/p>\n\n\n\n To create an account, we process business contact data<\/strong> and credentials<\/strong> (e-mail, password; billing\/shipping address). Mandatory fields are indicated. Passwords are stored encrypted<\/strong> and cannot be viewed by our staff. IP and timestamp of registration are logged. a) General<\/strong> b) Stripe (Card, Billie, Link, Apple Pay, Google Pay, Revolut Pay, EPS)<\/strong> Stripe may transfer data internationally (e.g., to the USA<\/strong>) under EU Standard Contractual Clauses<\/strong> (Art. 46 GDPR). c) PayPal<\/strong> d) Amazon Pay<\/strong> e) Billie (B2B \u2013 invoice\/factoring via Stripe)<\/strong> f) Credit checks (mediaFinanz)<\/strong> g) Feedback from payment providers<\/strong> h) Security<\/strong> We may send occasional<\/strong> e-mails about similar<\/strong> offers based on your prior purchases. Basis: Art. 6(1)(f) GDPR<\/strong> in conjunction with Art. 21 LSSI-CE (Spain)<\/strong> and Art. L34-5 CPCE (France)<\/strong> for existing customers. We process the data you provide to handle your request<\/strong>. Mandatory fields are indicated; IP<\/strong> and timestamp<\/strong> are processed for technical\/log purposes. We process the data specified in the contest terms only for organisation and winner notification; IP\/date\/time<\/strong> may be logged for legal\/technical safeguards. Without the required fields, participation is not possible. After a purchase, you may review<\/strong> the products (participation is voluntary<\/strong>). Basis: your consent<\/strong> (Art. 6(1)(a) GDPR<\/strong>) or\u2014within an existing customer relationship\u2014our legitimate interest<\/strong> in publishing authentic opinions (Art. 6(1)(f) GDPR<\/strong>). Commenting may require registration<\/strong> (name, e-mail). The display name<\/strong> can be public; other data are not. No disclosure to third parties. We maintain company pages on Facebook (Meta)<\/strong>, Instagram (Meta)<\/strong> and LinkedIn<\/strong> to communicate with users and present our business. To fulfil printing\/production and delivery orders, we share necessary data with printing<\/strong> and
Belziger Stra\u00dfe 31b, 06889 Lutherstadt Wittenberg, Germany
Represented by: Fabian Frank<\/strong>
Tel.: +49 (0) 3491-6245180
Data protection e-mail: privacy@europe-pen.com<\/a>
<\/strong>Websites: https:\/\/pen.eu<\/a> and https:\/\/europe-pen.com<\/a><\/p>\n\n\n\n2. Mandatory vs. voluntary data<\/h4>\n\n\n\n
3. Legal bases<\/h4>\n\n\n\n
\n
Germany:<\/strong> GDPR applies; German commercial\/tax retention may apply (HGB\/AO).
Spain:<\/strong> LOPDGDD<\/strong> supplements GDPR.
France:<\/strong> Loi Informatique et Libert\u00e9s<\/strong> supplements GDPR.<\/p>\n\n\n\n4. Direct marketing to existing customers (B2B)<\/h4>\n\n\n\n
5. Recipients and processors<\/h4>\n\n\n\n
\n
We do not sell<\/strong> personal data.<\/p>\n\n\n\n6. Data from third sources<\/h4>\n\n\n\n
7. Retention<\/h4>\n\n\n\n
8. Security<\/h4>\n\n\n\n
9. Necessity of provision<\/h4>\n\n\n\n
10. Automated decision-making<\/h4>\n\n\n\n
B. Processing activities on the website \/ shop<\/strong><\/h4>\n\n\n\n
1. Visiting our websites<\/h4>\n\n\n\n
b) Usage logs<\/strong> \u2013 Requested URL\/file, date\/time, data volume, status, browser type, IP; purposes: stability, security, quality assurance. Basis: Art. 6(1)(f) GDPR<\/strong>.<\/p>\n\n\n\n2. Cookies & consent management (CookieYes)<\/h4>\n\n\n\n
Processed data: shortened\/anonymised IP<\/strong>, consent status, date\/time, browser information, and the URL where consent was given.
Purposes: proof of consent<\/strong> (Art. 7(1) GDPR) and legal compliance<\/strong> (Art. 6(1)(c) GDPR), plus our legitimate interest<\/strong> in a compliant, user-friendly setup (Art. 6(1)(f) GDPR).
Preferences are stored in a CookieYes cookie and deleted when no longer required.
More info: https:\/\/www.cookieyes.com\/privacy-policy\/<\/a><\/strong><\/p>\n\n\n\n3. Web analytics (Google Analytics) \u2013 consent-based<\/h4>\n\n\n\n
4. Business account registration (B2B)<\/h4>\n\n\n\n
Bases: Art. 6(1)(b) GDPR<\/strong> (orders\/returns) and, where features are optional, Art. 6(1)(a) GDPR<\/strong>.
ERP:<\/strong> order\/master data are processed in JTL-Wawi<\/strong> (processor).<\/p>\n\n\n\n5. Orders & payment methods<\/h4>\n\n\n\n
We process data to fulfil orders<\/strong> and process payments<\/strong> (Art. 6(1)(b) GDPR) and, where applicable, for fraud prevention<\/strong> (Art. 6(1)(f) GDPR). Depending on the method, this includes name, billing\/shipping address, e-mail (and phone if needed), order number, amount, currency, payment details, IP<\/strong> and device data for anti-fraud. We transmit only what is necessary to the selected payment provider<\/strong>.<\/p>\n\n\n\n
Provider: Stripe Payments Europe Limited<\/strong>, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin 2, Ireland.
Stripe processes payment data (e.g., card number, name, IBAN\/BIC, amount, currency, transaction ID) as an independent controller<\/strong> to execute the payment and for fraud prevention.
Stripe supports Card<\/strong>, Billie<\/strong>, Link<\/strong>, Apple Pay<\/strong>, Google Pay<\/strong>, Revolut Pay<\/strong>, EPS<\/strong>; depending on your choice, Stripe forwards data to the relevant provider:<\/p>\n\n\n\n\n
More info: https:\/\/stripe.com\/de\/privacy<\/a><\/strong><\/p>\n\n\n\n
Provider: PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A.<\/strong>, 22\u201324 Boulevard Royal, L-2449 Luxembourg.
We transmit the necessary data (amount, billing details, e-mail, transaction ID, IP). PayPal may perform credit checks<\/strong>.
Bases: Art. 6(1)(b) GDPR<\/strong> and Art. 6(1)(f) GDPR<\/strong> (fraud prevention).
Privacy: https:\/\/www.paypal.com\/de\/webapps\/mpp\/ua\/privacy-full<\/a><\/strong><\/p>\n\n\n\n
Provider: Amazon Payments Europe S.C.A.<\/strong>, 38 avenue J.F. Kennedy, L-1855 Luxembourg.
Amazon verifies identity, executes payment, and prevents fraud. We receive payment confirmation, not<\/strong> full card\/bank data.
Privacy: https:\/\/pay.amazon.de\/help\/201212490<\/a><\/strong><\/p>\n\n\n\n
Provider: Billie GmbH<\/strong>, Charlottenstra\u00dfe 4, 10969 Berlin.
May involve identity and credit checks<\/strong>. We (or Stripe) transmit necessary company\/contact and order\/invoice data.
Bases: Art. 6(1)(b) GDPR<\/strong> and Art. 6(1)(f) GDPR<\/strong> (risk management).
Privacy: https:\/\/www.billie.io\/datenschutz<\/a><\/strong><\/p>\n\n\n\n
Provider: mediaFinanz GmbH<\/strong>, Wei\u00dfe Breite 5, 49084 Osnabr\u00fcck, Germany.
We may request credit reports before risk-bearing contracts, transmitting only the necessary business data (name, address, contact, order value).
Basis: Art. 6(1)(f) GDPR<\/strong> (legitimate interest in payment security).
Privacy: https:\/\/www.mediafinanz.de\/datenschutz\/<\/a><\/strong><\/p>\n\n\n\n
We receive only technical status information<\/strong> necessary for fulfilment (e.g., successful authorisation, transaction ID). We do not<\/strong> store full card numbers on our systems.<\/p>\n\n\n\n
Payment transmissions use TLS\/SSL<\/strong>; gateways comply with PCI-DSS<\/strong>.<\/p>\n\n\n\n6. Newsletter (Brevo \/ Sendinblue)<\/h4>\n\n\n\n
Required data: e-mail<\/strong> (optionally name for personalisation). For technical reasons, we also process IP<\/strong>, date<\/strong>, and time<\/strong> upon sign-up\/sending.
Delivery via Brevo (Sendinblue GmbH)<\/strong>; open\/click rates<\/strong> may be measured in a pseudonymised<\/strong> way to improve content (consent-based<\/strong>).
You can object<\/strong> at any time free of charge via the unsubscribe link or by e-mail to privacy@europe-pen.com<\/strong><\/p>\n\n\n\n7. Contact & callback forms \/ e-mail contact<\/h4>\n\n\n\n
Bases: Art. 6(1)(b) GDPR<\/strong> (pre-contractual communication) and Art. 6(1)(f) GDPR<\/strong> (general enquiries).<\/p>\n\n\n\n8. Contests (optional, occasional)<\/h4>\n\n\n\n
Basis: Art. 6(1)(b) GDPR<\/strong>.<\/p>\n\n\n\n9. Product reviews<\/h4>\n\n\n\n
Publicly displayed data:<\/p>\n\n\n\n\n
Reviews appear on the product page<\/strong> and are public. You may request modification or deletion<\/strong> at privacy@europe-pen.com<\/strong><\/li>\n<\/ul>\n\n\n\n10. Blog<\/h4>\n\n\n\n
Basis: Art. 6(1)(b)<\/strong> \/ Art. 6(1)(f) GDPR<\/strong>.<\/p>\n\n\n\n11. Social media presences<\/h4>\n\n\n\n
In addition to Europe Pen GmbH<\/strong>, platform operators act as joint controllers<\/strong>.<\/p>\n\n\n\n\n
Operators may process usage data (IP, device, interactions) and transfer outside the EU<\/strong> (e.g., USA). We do not control scope\/purposes; please consult their privacy notices.
We receive aggregated\/anonymous<\/strong> statistics (\u201cInsights\u201d) to improve our content.<\/li>\n\n\n\n12. Printing & shipping<\/h4>\n\n\n\n