Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies as long as no other specification is made in the following processing operations. "Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in protocol data (so-called server log files). These stored data include, for example, the name of the page accessed, date and time of access, IP address, the amount of data transferred, and the requesting provider. Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer. Your data may be transferred to third countries outside the EU, especially to Canada and the USA, and processed there. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Contact

Responsible Party

Contact us if you wish. The responsible party for data processing is: Erik Harder, herefortstr.35, 48429 Rheine Germany, 01729301781, hardererik44@gmail.com

Initiative Contact

Customer via email If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent you provide. Data processing serves to handle and respond to your contact request. If the contact is for pre-contractual measures (e.g., consultation for purchase interest, offer creation) or concerns an already concluded contract between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR. If the contact is for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. We use your email address only to process your request. Your data will then be deleted in compliance with legal retention periods unless you have consented to further processing and use.

Customer Account Orders

Customer Account When opening a customer account, we collect your personal data to the extent specified there. The data processing aims to improve your shopping experience and simplify order processing. Processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted. Collection, processing, and transfer of personal data during orders When ordering, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you. Your data will be shared, for example, with the shipping companies and dropshipping providers you selected, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to a minimum. Your data may be transmitted to third countries outside the EU, especially to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Reviews

Shopauskunft Customer Review We use the review tool "shopauskunft.de" from Händlerbund Management AG (Kohlgartenstraße 11 - 13, 04315 Leipzig; "Shopauskunft") for our website. After your order, we would like to ask you to rate and comment on your purchase with us. For this purpose, you will be contacted by email, using the technical system "Legally Compliant Review Request (RBA)". We process the data related to your order (order number/invoice number, purchase value, and shipping costs) as well as your email address. We may also use this data to verify your review. Processing is based on Art. 6 para. 1 lit. a GDPR with your consent, provided you have explicitly agreed to the sharing of your data and receiving the review request. You can revoke your consent at any time by using the corresponding link in the email or by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. For more information on data protection when using Shopauskunft, please visit: https://www.shopauskunft.de/datenschutz. Shopauskunft Widget Our website includes the Shopauskunft widget. This serves the purpose of displaying and advertising the number and results of the reviews we have received through Shopauskunft. To display the widget, it is technically necessary to transmit usage data from your internet browser to the Shopauskunft server and store it in log data (so-called server log files) for 7 days. These stored data include the name and URL of the retrieved file, date and time of retrieval, the IP address of the requesting computer, the website from which access is made (referrer URL), the browser used, and, if applicable, the operating system of your computer and the name of your access provider. Processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in promoting our offers by displaying the customer reviews already received. This data is not stored together with other personal data.

Shipping Service Provider Inventory Management

Transfer of the Email Address to Shipping Companies for Information on Shipping Status We forward your email address to the transport company as part of the contract processing, provided you have expressly consented to this during the order process. The transfer serves the purpose of informing you about the shipping status via email. Processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Use of an External Inventory Management System We use an inventory management system as part of order processing. For this purpose, your personal data collected during the order process is transmitted to lexoffice. Processing your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 para. 1 lit. b GDPR.

Payment Service Provider Credit Check

Use of PayPal We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you the option to pay via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transferred to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full Use of PayPal Plus We use the payment service PayPal Plus from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you the option to pay via the payment service. By selecting and using payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transferred to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. For certain payment methods like credit card via PayPal and direct debit via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical procedures, which may include address data in their calculation. Your legitimate interests are considered in accordance with legal requirements. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in protection against payment default when PayPal makes an advance payment. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation by notifying PayPal. Providing the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have selected. Use of PayPal Express We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you the option to pay via the payment service PayPal Express. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies allow your browser to be recognized. The processing of your personal data is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. By selecting and using PayPal Express, the data required for payment processing is transferred to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS. Use of PayPal Check-Out We use the payment service PayPal Check-Out from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you the option to pay via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transferred to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. Cookies may be stored to allow your browser to be recognized. The resulting data processing is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal For certain payment methods like credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical procedures, which may include address data in their calculation. Your legitimate interests are considered in accordance with legal requirements. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in protection against payment default when PayPal makes an advance payment. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation by notifying PayPal. Providing the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have selected. Third-party providers When paying via a third-party payment method, the data required for payment processing is transferred to PayPal. This processing is based on Article 6(1)(b) of the GDPR. For the execution of this payment method, the data may then be transferred by PayPal to the respective provider. This processing is based on Article 6(1)(b) of the GDPR. Local third-party providers can be, for example: Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany) giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main) Invoice purchase via PayPal When paying via the invoice purchase payment method, the data required for payment processing is first transferred to PayPal. For the execution of this payment method, the data is then transferred by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies as described above. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in protection against payment default when Ratepay makes an advance payment. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legalpayment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/. Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full. Use of Amazon Payments We use the payment service Amazon Payments from Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments") on our website. The data processing serves the purpose of offering you the option to pay via the payment service Amazon Payments. To integrate this payment service, it is necessary for Amazon Payments to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies allow your browser to be recognized. The processing of your personal data is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. By selecting and using "Amazon Payments," the data required for payment processing is transferred to Amazon Payments in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. Further information on data processing when using the Amazon Payments payment service can be found in the associated privacy policy at: https://pay.amazon.com/de/help/201212490 Use of Klarna Payment Options We use the payment service from Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing is transferred to Klarna in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. Cookies may be stored to allow your browser to be recognized. The resulting data processing is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. "Pay Later" (Invoice), "Pay Now" (Direct Debit), "Financing" (Installment Purchase) For certain payment methods like "Pay Later" (Invoice), "Pay Now" (Direct Debit), "Financing" (Installment Purchase), Klarna reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, and data related to the order, to a credit agency for the purpose of identity and credit checking and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical procedures, which may include address data in their calculation. Your legitimate interests are considered in accordance with legal requirements. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in protection against payment default when Klarna makes an advance payment. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation by notifying Klarna. Providing the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have selected. Further information, especially on which credit agencies Klarna passes your personal data to, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies General information about Klarna can be found for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal information is handled by Klarna in accordance with applicable data protection regulations and as stated in Klarna's privacy policy for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy Use of SOFORT We use the payment service provider SOFORT GmbH, (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing on our website. SOFORT GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data processing serves the purpose of offering you various payment methods through payment processing via the payment service provider SOFORT. If you have chosen the payment option, the data required for payment processing is transferred to SOFORT. This data processing is based on Article 6(1)(b) of the GDPR. Further information on data processing when using the payment service provider SOFORT can be found at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/. Data collection and processing for payment methods by credit card, direct debit, and invoice via secupay AG We have integrated the components secupay.Lastschrift, secupay.Rechnungskauf, and secupay.Kreditkarte from secupay AG (Goethestr. 6, 01896 Pulsnitz; "secupay") on our website. secupay is a payment institution within the meaning of the Payment Services Supervision Act (ZAG) and is registered with the Federal Financial Supervisory Authority (Graurheindorfer Str. 108, 53117 Bonn; "BaFin") (registration number: 126737) and enables cashless payment for products and services on the Internet. secupay represents a procedure through which the purchase price claim is assigned to secupay. This enables a merchant to deliver goods, services, or downloads to the customer immediately after ordering. If you select "Direct Debit," "Invoice Purchase," or "Credit Card" as the payment option during the order process in our online shop, data is automatically transmitted to secupay. By selecting one of these payment options, you consent to the transmission of personal data required for payment processing. The processing is based on Article 6(1)(a) of the GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing based on the consent before its withdrawal. During payment processing via secupay, payment method data is transmitted to secupay. secupay then conducts a technical check of the risk of payment default. The transaction result is then automatically communicated to us. The personal data exchanged with secupay includes first name, last name, address, email address, IP address, phone number, or other data necessary for payment processing. The transmission of data is for the purpose of payment processing and fraud prevention. We will also transmit other personal data to secupay if there is a legitimate interest in the transmission. The processing is based on Article 6(1)(f) of the GDPR. The personal data exchanged between secupay and us may be transmitted to credit agencies by secupay. This transmission is for the purpose of identity and credit checking. secupay may pass on personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or the data is to be processed on behalf. You have the option to revoke your consent to the handling of personal data at any time with secupay. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing. The applicable data protection provisions of secupay can be accessed at https://www.secupay.com/de/datenschutz Use of the payment service provider Mollie We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; "Mollie") for payment processing on our website. The data processing serves the purpose of offering you various payment methods through payment processing via the payment service provider Mollie. If you have chosen one of the payment options of the payment service provider Mollie, the data required for payment processing is transferred to Mollie. This includes your payment data (e.g., bank account number or credit card number), your IP address, your internet browser and device type, as well as in some cases your first and last name, your address data, and information about the product or service you have purchased from us. This data processing is based on Article 6(1)(b) of the GDPR. Further information on data processing when using the payment service provider Mollie can be found in the associated privacy policy https://www.mollie.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide on their acceptance individually, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may not be able to use all functions of this website to their full extent. You can find out how to manage cookies (including disabling them) in the most important browsers by following the links below: Chrome: https://support.google.com/accounts/answer/61416?hl=en Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-allow-and-reject Safari: https://support.apple.com/en-us/guide/safari/manage-cookies-and-website-data-sfri11471/mac Technically necessary cookies Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies to make our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The use of cookies or similar technologies is based on § 25 para. 2 TTDSG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Communication

Use of Shopify Inbox We use the live chat system Shopify Inbox by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada). The data processing serves the purpose of immediate and efficient communication between you and us as the provider. Data is stored and processed for the operation of the system and for the purpose of optimizing the service. Cookies may be used to operate the live chat system, allowing the browser to be recognized. The following information may be collected and processed: IP address and personal data provided by you when using the chat system. Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. An adequacy decision by the EU Commission is available for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses. The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation. For more information on data protection at Shopify, please visit https://www.shopify.com/legal/privacy and https://www.shopify.com/legal/dpa.

Plug-ins and Miscellaneous

Use of Google Translate We use the translation service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website via an API integration. The data processing serves the purpose of displaying the information provided on the website in other languages. To ensure the translation is automatically displayed in your chosen national language, the browser you use connects to Google's servers. Cookies may be used in this process. The following information, among others, may be collected and processed: IP address, URL of the visited page, date, and time. Your data may be transferred to the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles. The use of cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the legality of the processing carried out on the basis of the consent up to the revocation. For more information on the collection and use of your data by Google, please visit: https://www.google.com/policies/privacy/.

Data Subject Rights and Storage Duration

Storage Duration After complete contractual processing, the data will initially be stored for the duration of the warranty period and then considering legal, particularly tax and commercial retention periods, and will be deleted after the period expires, unless you have agreed to further processing and use. Rights of the data subject You have the following rights under Art. 15 to 20 GDPR if the legal requirements are met: right to information, rectification, deletion, restriction of processing, data portability. Furthermore, according to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR, as well as against processing for direct marketing purposes. Right to complain to the supervisory authority According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful. You can file a complaint with, among others, the supervisory authority responsible for us, which you can contact at the following contact details: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia P.O. Box 20 04 44 40102 Düsseldorf Tel.: +49 211 384240 Fax: +49 211 38424999 Email: poststelle@ldi.nrw.de Right to object If the processing of personal data listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future. After an objection has been made, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

last updated: 11/29/2023