Data protection information from Controlupp, Einsteinstraße 4, 85748 Garching near Munich


Status: 24.05.2018


From the 25th May 2018 the requirements of the EU General Data Protection Regulation (GDPR) apply, which introduces uniform regulations for data protection throughout Europe. With this data protection information, Controlupp, Einsteinstraße 4, 85748 Garching near Munich (hereinafter also referred to as "Controlupp") informs you about the processing of personal data carried out by Controlupp in accordance with the GDPR and the Federal Data Protection Act in its currently valid version (Federal Data Protection Act 2018).

I. Introduction

Data protection is an important concern for Controlupp and its employees. In all our business processes, we attach great importance to observing the requirements of the GDPR and the Federal Data Protection Act 2018. The following data protection information informs you about how Controlupp uses your personal data. In doing so, Controlupp adheres to the strict provisions of the European General Data Protection Regulation (GDPR) and German data protection law.

 II. Name and contact details of the person responsible for processing

Responsible within the meaning of the GDPR is Controlupp (hereinafter also referred to as "Controlupp"), Einsteinstraße 4, 85748 Garching near Munich, represented by the managing director Merve Sinem Özdemir; entered in the commercial register of the district court of Munich under the file number HRA 124039; Phone: +49 176/31250040; Email: ; Internet:; Sales tax identification number according to § 27a sales tax law: DE297203373.

 III. Contact details of the data protection officer

You can reach the data protection officer of the person responsible at


- personal/confidential for the data protection officer -

Einsteinstraße 4

85748 Garching near Munich


 IV. Purposes of data processing, legal basis


1. Use of the website

a)  Log-Files

If you visit the website and its subpages, so-called log files saved. This storage takes place on the basis of Art. 6 Para. 1 lit. f GDPR and collects the following data: The IP address of the accessing computer, the website from which you are visiting, the websites/sub-sites that you are visiting on, the date and duration of the visit, browser type and browser settings, operating system and the name of your access provider. This data is stored for a maximum of 7 days and then automatically deleted. The legal basis for processing the IP address is Art. 6 Para. 1 lit. f GDPR. Controlupp's legitimate interest results from ensuring a functioning connection, ensuring comfortable use of the website and its subpages, and ensuring system security and stability. A direct conclusion about your identity is not possible based on the information and will not be drawn by Controlupp.


b) Cookies

Controlupp uses so-called cookies on A "cookie" is a small file that is stored on your computer and is only transmitted to our server when you visit and/or one of the subpages there. Most of the cookies used by are so-called "session cookies", which are automatically deleted from your computer at the end of a session, for example when you close your browser. Certain functions of the website can only be used if cookies are permitted. Controlupp uses both session cookies and long-term cookies, which are stored beyond the session, to tailor the website, its sub-pages and the offers (including goods/services) contained there more precisely to users and the effectiveness of advertising campaigns to eat; the longer-term cookies are stored for a maximum of 2 years and then automatically deleted.


You can view and delete the cookies stored on your computer and control the handling of cookies via the settings in your internet browser. For example, you can block cookies by changing your browser settings to "do not accept cookies". It is also possible to set your browser so that it asks whether you agree to the setting of cookies. You can delete cookies that have been set at any time. The details can be found in the instructions for your browser. Please note that the functionalities of (and the subpages there) are only available to a limited extent or are not available at all if you do not allow cookies.


The storage of cookies enables Controlupp e.g. saving products that you have placed in the shopping cart, saving the entries you made during an order, recording your browser settings (esp. to optimize screen settings), saving your login details (so you don't have to re-enter them every time), etc.


As far as these cookies or The information contained therein is personal data, the legal basis for data processing is Art. 6 Para. 1 lit. f GDPR. The legitimate interest results from Controlupp's interest in optimizing the website, its offer and usability.


c) Google Analytics

The website uses Google Analytics for the purpose of needs-based design and continuous optimization of the website and its subpages. Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies to enable an analysis of the use of the website and its subpages. The information generated by the cookies is usually transmitted to a Google server in the USA and stored there. In doing so, your IP address is generally shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA; in exceptional cases, the full IP address will be sent to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The cookies stored by Google Analytics are deleted after 14 months at the latest. Further information on data protection and the terms of use for Google Analytics can be found at: https://www. and

To deactivate Google Analytics, load the following link to download and install a browser plugin:


The legal basis for using the web analysis service Google Analytics is Art. 6 Para. 1 lit. f) DSGVO.


2. Conclusion and implementation of contracts

If you conclude a contract with Controlupp, in particular via the web shop that can be used via the website, Controlupp will process the data required for the conclusion, implementation or termination of the contract. These are in particular: first name, last name, billing and delivery address, e-mail address, billing and payment data, date of birth, telephone number. The legal basis for this is Art. 6 Para. 1 lit. a and lit. b GDPR. For the processing of your e-mail address in the event of a purchase via the website, Controlupp is also obliged by law to send an electronic order confirmation, so that the legal basis for the processing of the e-mail address is also Art 6 paragraph 1 lit. c) GDPR is.

Insofar as Controlupp does not use your data for advertising purposes (see below 3.) Controlupp saves the data collected for contract processing for the duration of the contract and until the statutory warranty rights expire; provided Controlupp has contractually granted a guarantee until the end of the guarantee period. After this period(s) has expired Controlupp the data of the contractual relationship required under commercial and tax law until the end of the statutory retention periods.


To process a purchase contract Controlupp also the following data processing:


a) Payment / payment service provider

Controlupp processes your payment information for the purpose of payment processing. Depending on the payment method Controlupp Your payment information to third parties (e.g. to your credit card provider for credit card payments). The legal basis for this data processing is Art. 6 Para. 1 lit. a), Art. 6 Abs. 1 lit. b) GDPR and Art. 6 Para. 1 lit. f) DSGVO.


If you have decided to pay via PayPal, your payment data will be sent to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Controlupp points out that PayPal reserves the right to carry out a credit check for the payment methods direct debit via PayPal, credit card via PayPal, purchase on account via PayPal. You can find out more about this in PayPal's privacy policy remove.


b) Delivery / shipping partner, transport service provider

Controlupp works together with shipping partners and transport service providers for the purpose of delivering ordered goods and transmits the following data to them for this purpose: first name, last name, address; in exceptional cases (e.g. for delivery notifications for larger deliveries) also the e-mail address and telephone number. The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.


3. Data processing for advertising purposes

a) Newsletter

You can register for our newsletter on the website If you register for our newsletter and have given your consent to receive our newsletter, saves Controlupp the data you entered when registering for the newsletter (first name, surname, address, e-mail address). If you already have a user account with King Controller, the data stored in this respect will be supplemented with the information that you would like to receive the newsletter. The legal basis for this data processing is Art. 6 Para. 1 lit. a) GDPR.


right of withdrawal

You can revoke your consent at any time with effect for the future by sending a message to


 b) advertising

Controlupp basically has a legitimate interest in using your data for marketing purposes. Controlupp processes the data: first name, last name, postal address, year of birth for its own marketing purposes. This data can Controlupp to store further personal data collected about you in compliance with the legal requirements for our own marketing purposes. The purpose of this data processing is to send you advertising tailored to your interests and needs. The legal basis for the use of personal data for marketing purposes is Art. 6 Para. 1 lit. f) DSGVO.


Right to object

You can object to the use of your personal data for the aforementioned marketing purposes at any time with effect for the future by sending a message to If you have lodged an objection, your data will be Controlupp no longer used for advertising data processing (blocking of data for marketing purposes).


 4. customer account

You can create a password-protected customer account on the website You assign the password yourself. The aim of this offer is to make it easier for you to place new orders by permanently storing your personal data. Creating a customer account is voluntary. If you create a customer account, the data collected here will be processed on the basis of Article 6 Para. 1 lit. b) GDPR. You have the option of viewing and changing the data stored about you in the customer account. You can delete your customer account at any time. However, this does not result in your data stored in the customer account being completely deleted immediately, but only after the commercial and tax storage obligations applicable to Controlupp have expired. The legal basis for this further data processing is Article 6 Paragraph 1 Letter c) GDPR and Article 6 Paragraph 1 Letter f) GDPR.


Please note that you treat your access data (especially the password) confidentially and do not make it accessible to unauthorized third parties.            

V. Transfer of data to recipients outside the EU

Controlupp are, with the exception of the above under IV.1. c) and d), your data will not be passed on to recipients based outside the European Union or the European Economic Area. The under IV.1. c) and d) mentioned processing includes data transmission to servers in the USA. The data transmission takes place on the basis of so-called standard contractual clauses of the EU Commission (available at: OJ:L:2010:039:0005:0018:DE: PDF) and on the basis of the so-called Privacy Shield (available at:


 VI. Your rights

1. right of withdrawal

Provided Controlupp processes personal data on the basis of your consent, you have the right to withdraw your consent at any time. The revocation of the consent does not mean that the data processing carried out on the basis of the consent up to the time of the revocation becomes ineffective. You can revoke your consent at any time with effect for the future by sending a message to


2. right of providing information

According to Art. 15 GDPR you have a right to Information about your at Controlupp stored personal data. According to Art. 15 Para. 1 DSGVO, this includes information about a) the processing purposes; b) the categories of personal data being processed; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) if possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period; e) the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing; f) the existence of a right of appeal to a supervisory authority; g) if the personal data are not collected from the data subject, all available information about the origin of the data; h) the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you.

You can from Controlupp request that a copy of the personal data being processed is made available to you. You can request information about your personal information stored by us at


3. Right to Rectification

According to Art. 16 GDPR you have the right from Controlupp to immediately request the correction of incorrect personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.


4. Right to Erasure ("Right to be Forgotten")

According to Art. 17 Para. 1 DSGVO you have the right from Controlupp to demand that personal data concerning you be deleted immediately, and Controlupp is obliged to delete personal data immediately if one of the following reasons applies: a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) You revoke your consent on which the processing pursuant to Art. 6 Para. 1 lit. a) GDPR or Art. 9 Para. 2 lit. a) GDPR and there is no other legal basis for the processing; c) You object to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21 (2) GDPR; d) the personal data have been processed unlawfully; e) The erasure of the personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States Controlupp subject to; f) The personal data was collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.

According to Art. 17 Para. 3 GDPR, this does not apply if the processing is necessary a) to exercise the right to freedom of expression and information; b) to fulfill a legal obligation that requires processing under Union or Member State law, the Controlupp is subject to, requires, or to perform a task that is in the public interest or in the exercise of official authority Controlupp was transferred; c) for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h) and i) GDPR and Art. 9 Para. 3 GDPR; d) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, insofar as the law referred to in Art. 17 Para. 1 GDPR is likely to make it impossible or seriously impair the achievement of the objectives of this processing , or e) to assert, exercise or defend legal claims.


5. Right to restriction of processing

According to § 18 Para. 1 DSGVO you have the right from Controlupp to request the restriction of processing if one of the following conditions is met: a) the accuracy of the personal data is contested by you for a period of time that Controlupp enables the accuracy of the personal data to be checked, b) the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data; c) Controlupp the personal data is no longer required for the purposes of processing, but you need them to assert, exercise or defend legal claims, or d) you have lodged an objection to the processing pursuant to Art. 21 (1) GDPR, as long as it is not yet clear whether the legitimate reasons of Controlupp outweigh your legitimate reasons.


6. Right to data portability

According to Art. 20 Para. 1 DSGVO, you have the right to the personal data concerning you that you Controlupp have provided in a structured, common and machine-readable format, and you have the right to transfer this data to another person responsible without hindrance Controlupp, provided that a) the processing is based on consent pursuant to Art. 6 Para. 1 lit. a) GDPR or Art. 9 Para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b) GDPR and b) the processing is carried out using automated procedures. In exercising this right to data portability, you have the right to obtain the personal data directly from Controlupp be transmitted to another person responsible, insofar as this is technically feasible.


7. Right to object

According to Art. 21 Para. 1 GDPR, you have the right at any time, for reasons arising from your particular situation, against the processing of personal data concerning you, which is based on Art. 6 Para. 1 lit. e) or lit. f) GDPR to file an objection; this also applies to profiling based on these provisions. If personal data is processed in order to operate direct advertising, you have the right, in accordance with Art. 21 (2) GDPR, to object at any time to the processing of personal data relating to you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.


8. Right to lodge a complaint with a supervisory authority

In accordance with Art. 77 GDPR, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.


9. Note on your aforementioned rights

You can assert the aforementioned rights to which you are entitled towards us via the contact details specified under II. of this data protection declaration; in particular, this can also be done by email to


VII. Data Security

For Controlupp the security of your personal data has the highest priority. Controlupp therefore protects the data stored by us through technical and organizational measures, in particular to effectively prevent misuse of the data by third parties and/or loss of the data. This also applies to companies that process data on behalf of and under the direction of Controlupp process and use. The transmission of your personal data on the website is encrypted: We use Secure Socket Layer (SSL) for communication via your internet browser, which you can recognize by the lock symbol that your browser displays while the shows SSL connection. The protection is also guaranteed by the fact that the employees of Controluppwho process personal data have been committed to data secrecy and must comply with it.


Controlupp, 10.03.2022