Data protection

Privacy policy

1. Data protection at a glance

General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.
Data collection on our website
Who is responsible for data collection on this website?
The data processing on this website is carried out in accordance with Art. 26 DSGVO jointly responsible by the website operator ninepoint consulting GmbH and Asus Computer GmbH. The contact details can be found in the imprint and in this data protection declaration in the section "Information on the responsible party".
How do we collect your data?
Your data is collected on the one hand by you providing it to us. This can be, for example, data that you enter in a contact form or by placing an order.
Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.
What rights do you have with regard to your data?
You have the right to obtain information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to demand the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this purpose and for further questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Analysis tools and third-party tools
When you visit our website, your surfing behaviour may be statistically analysed. This is done mainly with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following data protection declaration.
You can object to this analysis. We will inform you about the objection options in this data protection declaration.

2. General notes and obligatory information

Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
Note on the responsible party
The responsible party for data processing on this website is:
ninepoint consulting GmbH
Im Mediapark 8
50670 Köln
Phone: 0221 97 598 33-0
E-mail: info@ninepoint.de
Pursuant to Art. 26 DSGVO, the processing is jointly responsible with:
Asus Computer GmbH
Harkortstraße 21-23
40880 Ratingen
Telephone: 02102 56 09 0
E-mail: privacy@asus.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Revoking your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right of appeal to the competent supervisory authority
In the event of violations of data protection law, the data subject has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, blocking, deletion
You have the right at any time, within the framework of the applicable legal provisions, to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
Objection to advertising mails
The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam e-mails.

3. Jointly responsible parties pursuant to Art. 26 DSGVO

Division of responsibilities
ninepoint consulting GmbH is responsible for the operation of the shop and the processing of orders and the associated processing of personal data.
Asus Computer GmbH is responsible for the provision of the customer accounts via the "ASUS Account", the customer support, the newsletter dispatch, the contact form and the statistical analyses and evaluations with Google Analytics, Google Tag Manager, Accengage and the associated processing of your personal data.
Procedure for information, blocking, deletion and revocation of your consent
Central contact for requests for information, blocking or deletion of your personal data as well as for revocation of consent is:
ninepoint consulting GmbH
Schanzenstraße 24
51063 Köln
Phone: 0221 97 598 33-0
E-mail: info@ninepoint.de
If the request concerns a processing operation for which Asus Computer GmbH is responsible, ninepoint consulting GmbH will forward this request to Asus Computer GmbH. In the case of enquiries concerning both responsible parties, ninepoint consulting GmbH will take over the processing.

4. Data Protection Officer

Legally required data protection officer
An external data protection officer has been appointed for all data processing for which ninepoint consulting GmbH is responsible. You can reach him/her under the following contact options:
RPA Datenschutz + Compliance GmbH
Hauser Gasse 19b
35578 Wetzlar
Phone: 06441/67100-0
E-mail: datenschutz@ninepoint.de

5. Data collection on our website

Cookies
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources.
The basis for the data processing is Art. 6 para. 1 lit. f DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is thus based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to info@ninepoint.de is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Customer account - "ASUS Account"
You can register on our website to use additional functions on the site. The registration is done via the service "Asus Account". We will use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered.
The fields marked with an (*) are mandatory fields. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
For important changes, for example in the scope of the offer or in the case of technically necessary changes, we use the e-mail address provided during registration to inform you in this way.
The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. To do so, simply send an informal e-mail to privacy@asus.com. The legality of the data processing already carried out remains unaffected by the revocation. Revocation of your consent is therefore only possible for the future.
The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal or contractual retention periods remain unaffected.
Further information on data protection https://www.asus.com/de/Terms_of_Use_Notice_Privacy_Policy/Privacy_Policy
Social Login
We offer you the possibility to authenticate yourself with your existing profile at one of the social networks Facebook or Google (provider) for the registration and login to the customer account and finally to register or log in.
An additional registration is therefore not possible. To register, you will be redirected to the Facebook or Google account page, where you can log in with your usage data. This links your Facebook profile or Google account and our service.
For this purpose, you will find the corresponding icons of the respective providers of the social login supported by our website on the registration page or login page. Before a connection to the provider is established, you must expressly agree to the process and data transfer described below:
Your click on the respective icon opens a new window (so-called app), on which you must log in with your Facebook or Google login data. After you have successfully logged in, your provider will tell you which data (name and email address) will be transmitted to us for authentication as part of the registration or login process. If you have agreed to this data transmission, the fields required by us for registration will be filled with the transmitted data. The data required by us for registration or login are your name and your e-mail address. Only after your express consent to the use of the transmitted and required data will your data be stored by us and used for the purpose of registration. A link between the customer account created with us and your account with the corresponding provider beyond the authentication process does not take place.
In order to be able to carry out the authentication process for registration and login, your IP address is transmitted to the respective provider. We have no influence on the purpose and scope of the data collection and on the further processing of the data by the respective provider of the social network. For more information, please read the privacy policy of the respective provider. Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php | Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de.
Collection, processing and use of personal data when ordering
When you place an order, we collect and use your personal data only to the extent necessary for the fulfilment and processing of your order and for dealing with your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 (1) lit. b DSGVO and is necessary for the fulfilment of a contract with you. Your data will not be passed on to third parties without your express consent. The only exceptions to this are our service partners whom we need to process the contractual relationship or service providers whom we use in the context of order processing. In addition to the recipients named in the respective clauses of this data protection declaration, these are, for example, recipients of the following categories: Shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping merchants. In all cases, we strictly observe the legal requirements. The scope of data transfer is limited to a minimum.
Orders are processed either as "guest orders" without registration or by using a customer account ("ASUS Account").

6. Analysis Tools and Advertising

Hatch
On this website we use the "Where to buy" service of the provider Hatch, A J Ernststraat 5, Amsterdam 1083GP. Hatch provides services and technology to businesses with the aim of listing relevant online retailers in relation to a particular product or service. In this way, web-based e-commerce solutions can make it easier for online shoppers to find and buy products, whether they come from retailer websites, manufacturer websites, destination shopping sites or mobile shopping apps. Hatch accepts and processes data from many sources, including information from retailers, manufacturers and other market sources. Hatch may use your information based on your use of our website or, if you linked here from another website, as a service to.
Hatch uses an anonymous session ID and anonymises IP addresses so that no inference can be made about individuals.
For more information about Hatch and privacy, please visit: https://www.gethatch.com/privacy-policy/
Google Analytics
This website uses features of the Google Analytics web analytics service. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising.
Trustpilot
For ratings of service and products, we use a plugin of the rating platform Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark ("Trustpilot"). You can find more information about TrustPilot and TrustPilot's data protection here: https://de.legal.trustpilot.com/end-user-privacy-terms.
Push notifications
You can sign up to receive so-called push notifications. For this purpose, we use the "CleverPush" offer, which is operated by CleverPush GmbH, Nagelsweg 22, 20097 Hamburg ("CleverPush").
You will regularly receive information via our push notifications about [Please describe the content of the push notifications in as much detail as possible].
In order to sign up for the push notifications, you must confirm the query of your browser or terminal device to receive the notifications. This process is documented and stored by CleverPush. For this purpose, the login time and a push token or device ID are stored. This data is used on the one hand to be able to send you the push notifications and on the other hand as proof of your registration. The legal basis for this processing is your consent and thus Art. 6 para. 1 lit. a DSGVO.
CleverPush also evaluates our push notifications statistically. CleverPush can thus recognise whether and when our push notifications were displayed and clicked on. This enables us to determine which push notifications interest recipients in order to tailor future messages to the presumed interests of all recipients and thus increase interest in our offer. Additionally, in addition to the push token or device ID, we store the subject focus of the app on which the push notifications were activated (e.g. business, sports, etc.). We also use this information to send push notifications to the relevant subscribers that are in their presumed interests. The legal basis of the processing in each case is Art. 6 para. 1 lit. f DSGVO. The assignment of a push token or device ID to a specific person only takes place if we should be legally obliged to do so, for the defence of claims against us if this is required as evidence, as well as for the possible prosecution of violations of the law.
You can revoke your consent to the storage and use of your personal data to receive our push notifications at any time with effect for the future. Furthermore, you can object to the use of personal data described above on the basis of Art. 6 (1) lit. f at any time. Please revoke your consent for this purpose. You can revoke your consent in the settings provided for this purpose for receiving push notifications in the settings of your device or browser.
Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your data will be stored as long as the subscription to our push notifications is active.
The unsubscribe process is explained in detail at the following link: https://cleverpush.com/faq.
IP Anonymisation
We have activated the IP anonymisation function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser Plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which will prevent the collection of your data on future visits to this website: Google Analytics deaktivieren.
More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Alternatively to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link "Google Analytics deaktivieren". An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.
Contract data processing
We have concluded a contract with Google for contract data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics with Google Analytics
This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".
Google Tag Manager
This website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags insofar as these are implemented with the Google Tag Manager.
Criteo , Article 6 (1) lit a DS-GVO.
The services of Criteo allow us to display advertisements for and on our website in a more targeted manner in order to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products in which he or she has shown interest on other websites, this is referred to as "remarketing". For these purposes, when our website and other websites on which Criteo is active are called up, a code from Criteo is executed directly by Criteo and so-called (re)marketing tags (invisible graphics or code, also referred to as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which web pages the user has visited, which content he or she is interested in and which offers he or she has clicked on, as well as technical information on the browser and operating system, referring web pages, time of visit and other information on the use of the online offer. Criteo may also combine the aforementioned information with information from other sources. If the user subsequently visits other websites, he can be shown ads tailored to his interests.
The processing of user data is pseudonymous, i.e. no clear user data (such as names) are processed and IP addresses of users are shortened. Processing only takes place on the basis of an online identifier, a technical ID. Any IDs (e.g. of a customer support system) or email addresses provided to Criteo are encrypted and stored as a series of characters that do not allow identification.
For more information and to opt out of the collection of data by Criteo, please see Criteo's privacy policy: https://www. criteo.com/en/privacy/.

7. Newsletter

Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The processing of the data entered in the newsletter registration form or - in the case of consent to newsletter dispatch in the course of the order - is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing procedures already carried out remains unaffected by the revocation.
The data you have provided us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after unsubscribing from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the members' area) remain unaffected by this.

8. Plugins and Tools

Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.
If your browser does not support web fonts, a standard font from your computer will be used.
For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq and read Google's privacy policy: https://www.google.com/policies/privacy/.
Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and any ratings collected, as well as to offer Trusted Shops products to buyers after they have placed an order.
This serves to protect our legitimate interests in optimal marketing of our offer, which are overriding in the context of a balancing of interests, in accordance with Art. 6 (1) p. 1 lit. f DSGVO. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.
Further personal data is only transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.
Use of the live chat system "Smartsupp Livechat"
When contacting us via chat, the user's details are used to process the contact enquiry and its settlement pursuant to Art. 6 Para. 1 lit. b. (in the context of contractual/pre-contractual relations), Art. 6 para. 1 lit. f. (other enquiries) DSGVO. The user's details are stored and processed in the customer relationship management system ("CRM system") of the company Smartsupp.com, s.r.o. Lidicka 20, 602 00 Brno, Czech Republic, in order to be able to process the enquiries more quickly and efficiently (legitimate interest pursuant to Art. 6 para. 1 lit. f. DSGVO ). We delete the requests if they are no longer necessary. We review the necessity every two years; furthermore, the legal archiving obligations apply.

9. Use of an external merchandise management system

We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected in the context of the order will be transmitted to plentymarkets GmbH, Bürgermeister-Brunner-Straße 15, 34117 Kassel, Germany.
For this purpose, we have concluded an order processing agreement with plentymarkets GmbH pursuant to Art. 28 DS-GVO and fully implement the strict requirements of the German data protection authorities.
For more information on the handling of personal data at plentymarkets, please visit https://www.plentymarkets.eu/unternehmen/datenschutz/.

10. Payment service providers

Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE
Use of Amazon Pay
When paying via Amazon Pay, we pass on your payment data primarily to Amazon Payments Europe s.c.a., and secondarily to Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338 Luxembourg (hereinafter "Amazon Payments"), as part of the payment processing. The legal basis for this is the processing of the contract pursuant to Art. 6 para. 1 p. 1 lit. b DS-GVO .
Amazon Payments reserves the right to conduct a credit check. Amazon Payments uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these have their basis in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values.
In addition, Amazon Payments is entitled to pass on your data to unnamed third parties (banks, e-service providers, service partners, but also auditors, analysis services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies).
For further information on data protection, including information on the credit agencies used, please refer to the Amazon Payments privacy policy: pay.amazon.com/en/help/201751600.
Last updated: 26.11. 2020
.
.