In order to fulfil our information obligations under Articles 12 et seq. of the General Data Protection Regulation (GDPR), we hereby provide you with our information on data protection: Who is responsible for data processing? The responsible party in terms of data protection law is my-eLiquid @ Markus Steiner & Stephan Steiner GbR – Adam-Geisler-Straße 3 – 82140 Olching Additional information about our company can be found in the legal notice on our website: https://www.my-eliquid.de/impressum/ Purposes of processing and legal basis The data you provide to us will only be processed for the purposes for which it was transmitted or collected. Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In such cases, we will comply with any information obligations under Article 13(3) GDPR and Article 14(4) GDPR. The legal basis for the processing of your personal data is Article 6 GDPR. The following options are possible:

  • Consent (Art. 6(1)(a) GDPR)
  • Data processing for the performance of contracts (Art. 6(1)(b) GDPR)
  • Data processing based on a balancing of interests (Art. 6(1)(f) GDPR)
  • Data processing to fulfil a legal obligation (Art. 6(1)(c) GDPR)

If personal data is processed on the basis of your consent, you have the right to revoke your consent at any time. If data is processed on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR. Duration of data storage We process your data for as long as is necessary for the respective purpose. If there are legal retention obligations, the relevant personal data will be stored for the duration of the retention obligation. Once the retention obligation has expired, we will check whether there is any further need for processing. If there is no further need, the data will be deleted. You have the right to obtain information about the data we have stored about you and to request its deletion or restriction of processing. Disclosure of your data to third parties Your personal data will only be disclosed to third parties if this is necessary for the performance of the contract with you, if the disclosure is permissible on the basis of a balancing of interests within the meaning of Art. 6(1)(f) GDPR, if there is a legal obligation to disclose the data, or if you have given your consent. Transfer to third countries We process your personal data exclusively in the Federal Republic of Germany. Information about your rights as a data subject You have the right to obtain information about the personal data we process about you. Depending on the nature of the request, we may require additional proof of your identity. You have the right to have your personal data corrected or deleted or to restrict its processing, provided that you are legally entitled to do so. Furthermore, you have the right to object to the processing within the framework of the legal requirements. The same applies to the right to data portability. You have a right to object in accordance with Art. 21 (1) and (2) GDPR and can revoke any related consents at any time. Our data protection officer No data protection officer has been appointed by the provider, as there is no obligation to do so pursuant to Art. 37(1) GDPR and Section 38 BDSG (new). right of appeal You have the right to lodge a complaint about the processing of personal data with the competent supervisory authority for data protection. The address of the authority responsible for us is: The State Commissioner for Data Protection and Freedom of Information Bavaria

Wagmüllerstraße 18, 80538 Munich, Tel. 089 212672-0, Fax 089 212672-50

Email poststelle@datenschutz-bayern.de, Web https://www.datenschutz-bayern.de/ As of 06/06/2018