Privacy Policy
––––––––––––––––––––
Data protection declaration
––––––––––––––––––––
1) Introduction and contact details of the person responsible
1.1 We are pleased that you visit our website and thank you for your interest. In the following we will inform you about dealing with your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Artexio UG (limited liability), Emsdettener Str. 10, 48268 Greven, Germany, Tel.: 01794226249, email: support@artexio.de. The person responsible for processing personal data is the natural or legal person who decides alone or together with others about the purposes and means of processing personal data.
2) Data acquisition when visiting our website
2.1 When using our website, i.e. if you do not register or otherwise convey information, we only collect data that your browser transmits to the side server (so-called "server log files"). When you call up our website, we will collect the following data that is technically necessary for us to display the website:
- Our visited website
- Date and time at the time of access
- Quantity of the data sent in byte
- Source/reference, from which they came to the page
- used browser
- Operating system used
- used IP address (possibly: in anonymized form)
The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to check the server log files retrospectively, should indicate specific indications of illegal use.
2.2 This website uses an SSL-BZW for security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or inquiries to those responsible) TLS encryption. You can see an encrypted connection to the string "https: //" and the castle symbol in your browser line.
3) Hosting & Content Delivery Network
3.1 Shopify
For the hosting of our website and the presentation of the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, on K2P 1L4, Canada
All data collected on our website is processed on the provider's servers. We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.
In the event of a data transmission to Canada, an appropriate level of data protection is guaranteed by an adequacy decision by the European Commission.
3.2 Cloudflare
We use a content delivery of the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is to maintain our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 Para. 1 lit. f GDPR. We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.
For data transmission to the USA, the provider has joined the EU-US-data protection framework (EU-US-EU Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
4) Cookies
In order to make the visit of our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. In some cases, these cookies are automatically deleted after closing the browser (so-called "session cookies"), some of these cookies remain longer on their device and enable the storage of side settings (so-called "persistent cookies"). In the latter case, you can find the memory duration of the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 Lit.B GDPR either for the implementation of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of consent or According to Art. 6 Para. 1 Lit. f GDPR to maintain our legitimate interests in the best possible functionality of the website and a customer -friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or can rule out the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be restricted if you are not accepted.
5) contact
As part of contact with us (e.g. via contact form or email)-only for the purpose of processing and answering your request and only to the extent required-personal data are processed.
The legal basis for the processing of this data is our legitimate interest in answering your concern in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be seen from the circumstances that the affected fact is finally clarified and if there are no statutory retention obligations.
6) Data processing for order processing
6.1 Insofar as the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 Lit. B GDPR.
If we are on the basis of a corresponding contract updates for goods with digital elements or for digital products, we will process the contact details you transmit when you order (name, address, email address) in order to be within the framework of our statutory information obligations in accordance with Art. 6 ABS . 1 lit. c GDPR on a suitable communication path (such as postal or email) about upcoming updates in the legally provided period. Your contact details will be used strictly for communications about updates owed by us and for this purpose by us only processed to the extent that this is necessary for the respective information.
To handle your order, we also work with the subsequent service provider (s), who support us in whole or in part in the implementation. Certain personal data is transmitted to these service providers in accordance with the following information.
6.2 To fulfill our contractual obligations towards our customers, we work with external shipping partners. We give your name as well as your delivery address and, as far as the delivery requires, your telephone number, only for the purposes of the delivery of goods. Art. 6 Para. 1 lit. b GDPR to a shipping partner selected by us.
6.3 Printful
We use the following provider for order processing: Printful, Inc. 11025 Westlake Drive, Charlotte, NC28273, USA
Name, address and, if necessary, further personal data will be passed on in accordance with Art. 6 Para. 1 Lit. B GDPR exclusively for the purpose of processing the online order to the provider. Your data is only passed on if this is actually necessary for the processing of the order.
For the transmission of data to the USA, the provider relies on standard contract clauses of the European Commission, which should ensure compliance with the European data protection level.
6.4 Delivering of personal data to shipping service provider
- DHL
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We pass on your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of the coordination of a delivery date or for the delivery notice to the provider, provided that you are expressed in the order process Have given consent. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 Lit. B GDPR. The transfer is only carried out if this is required for the delivery of goods. In this case, a prior coordination of the delivery date with the provider or the delivery notice is not possible.
The consent can be revoked at any time with effect for the future towards the person responsible for the above or to the provider.
- Fedex
As a transport service provider, we use the following provider: Fedex Express Germany GmbH, Langer Kornweg 34 K, 65451 Kelsterbach, Germany
We pass on your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of the coordination of a delivery date or for the delivery notice to the provider, provided that you are expressed in the order process Have given consent. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 Lit. B GDPR. The transfer is only carried out if this is required for the delivery of goods. In this case, a prior coordination of the delivery date with the provider or the delivery notice is not possible.
The consent can be revoked at any time with effect for the future towards the person responsible for the above or to the provider.
6.5 Use of payment service providers (payment services)
- Apple Pay
If you decide on the payment method "Apple Pay" of the Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your end device operated with iOS, Watchos or MacOS by loading a payment card stored on "Apple Pay". Apple Pay uses safety functions that are integrated into the hardware and software of your device to protect your transactions. For the release of a payment, the entry of a codes previously defined by it and the verification using the "Face ID" or "Touch ID"- function of your device is required.
For the purpose of the payment processing, your information given as part of the order process and the information about your order is passed on to Apple in encrypted form. Apple then again encrypted this data with a developer -specific key before the data to carry out the payment to the payment service provider of the payment card stored in Apple Pay is transmitted. The encryption ensures that only the website that the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction -specific, dynamic security code to the starting website to confirm the payment success.
If personal data is processed in the transmission described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple keeps anonymized transaction data, including the approximate purchase amount, the approximate date and the approximate time as well as the information as to whether the transaction was successfully completed. Anonymization fully excludes a personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on the iPhone or Apple Watch to complete a purchase that you made via Safari on the Mac, communicate the Mac and the authorization device via an encrypted channel on the Apple server. Apple processes or stores none of this information in a format with which your person can be identified. You can deactivate the possibility of using Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and deactivate "allow payments on Mac".
Further information on data protection at Apple Pay can be found at the website below: https://support.apple.com/de-de/ht203027
- Google Pay
If you choose Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing is carried out via the "Google Pay" application of your with at least Android 4.4 (“Kitkat”) operated mobile devices that have been operated by an NFC function by loading a payment card stored on Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay of more than € 25,- € previously unlocking your mobile device is required by the verification measure (such as face recognition, password, fingerprint or pattern).
For the purpose of the payment processing, your information given as part of the ordering process and the information about your order will be passed on to Google. Google then transmits its payment information stored in Google Pay in the form of a one -off transaction number to the starting website with which a payment is verified. This transaction number contains no information about the real payment data of your payment method stored in Google Pay, but is created and transmitted as a one -off numerical token. In all transactions via Google Pay, Google only appears as an intermediary for processing the payment process. The transaction is carried out exclusively in the ratio between the user and the output website by loading the payment stored on Google Pay.
If personal data is processed in the transmission described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Google reserves the right to collect, save and evaluate certain process -specific information on every transaction made via Google Pay. This includes the date, time and amount of the transaction, dealer location and description, a description of the goods or services provided by the dealer, photos that you have attached to the transaction, the name and email address of the seller and buyer or buyer or of the sender and recipient, the payment method used, your description for the reason of the transaction and, if necessary, the offer associated with the transaction.
According to Google, this processing takes place exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in the proper accounting, the verification of process data and the optimization and function maintenance of the Google Pay service.
Google also reserves the right to bring the processed process data together with further information that is collected and saved by Google when using further Google services.
Google Pay's terms of use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection on Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna
One or more types of online payment from the following provider are available on this website: Klarna Bank, Sveafen 46, 111 34 Stockholm, Sweden
If you choose a payment method of the provider, in which you are in advance (such as credit card payment), your payment data communicated as part of the order process (including name, address, banking and number card information, currency and transaction number) as well as information about the content of your order will passed on in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only insofar as it is necessary.
If you choose a payment method in which the provider is in advance (such as accounting or installment purchase or direct debit), you will also be asked in the order process, certain personal data (first and last name, street, house number, postal code, place, date of birth, E -Mail address, telephone number, possibly data on an alternative means of payment).
In order to protect our legitimate interest in determining the solvency of our customers, we are forwarded to the provider for the purpose of a credit check to the provider in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks on the basis of the personal data you specified and other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected with regard to payment and/or claim loss risks can be granted.
In addition to the provider-internal criteria in accordance with Art. 6 Para. 1 Lit. f GDPR, identity and credit information from the following information can also be included in the decision as part of the application test:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit information can contain probability values (so-called score values). Insofar as score values flow into the result of the credit information, you have your basis in a scientifically recognized mathematical-statistical process. The calculation of the score values flow, among other things, but not exclusively, address data.
You can object to this processing of your data at any time by a message to us or to the provider. However, the provider may remain entitled to process your personal data, provided that this is necessary for contractual payment processing.
- PayPal
One or more types of online payment from the following provider are available on this website: PayPal (Europe) S.A.R.L. et cie, s.c.a., 22-24 Boulevard Royal, L-2449 Luxembourg
If you choose a payment method of the provider, in which you are in advance, your payment data communicated as part of the order process (including name, address, banking and number card information, currency and transaction number) as well as information about the content of your order in accordance with Art. 6 Paragraph 1 lit. b GDPR passed on. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only insofar as it is necessary.
When selecting a payment method in which we are in advance, you will also be asked in the order sequence, certain personal data (first and last name, street, house number, postcode, location, date of birth, email address, telephone number, an alternative means of payment).
In order to protect our legitimate interest in determining your solvency in such cases, this data is forwarded by us in accordance with Art. 6 Para. 1 Lit. f GDPR for the purpose of a credit check to the provider. The provider checks on the basis of the personal data you specified and other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected with regard to payment and/or claim loss risks can be granted.
The credit information can contain probability values (so-called score values). Insofar as score values flow into the result of the credit information, you have your basis in a scientifically recognized mathematical-statistical process. The calculation of the score values flow, among other things, but not exclusively, address data.
You can object to this processing of your data at any time by a message to us or to the provider. However, the provider may remain entitled to process your personal data, provided that this is necessary for contractual payment processing.
- Shopify Payments
One or more types of online payment from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
If you choose a payment method of the provider, in which you are in advance (such as credit card payment), your payment data communicated as part of the order process (including name, address, banking and number card information, currency and transaction number) as well as information about the content of your order will passed on in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only insofar as it is necessary.
7) online marketing
Google Adsense
This website uses Google Adsense, a webanze duty Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Adsense uses so -called cookies, i.e. text files that are stored on your computer and that enable an analysis of the use of the website by you. In addition, Google Adsense also uses so-called "Web Beacons" (small invisible graphics) for the collection of information, through the use of which simple actions such as visitor traffic can be recorded, collected and evaluated. The information generated by the cookie and/ or web beacon (including your IP address) by using this website is usually transferred to a Google server and stored there. Here it can also be sent to the Google LLC servers. come in the USA.
Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google Adsense is not merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/ or if third parties process this data on behalf of Google.
All processing described above, in particular reading information on the end device used via cookies and/or web biacons, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this granting of consent, the use of Google Adsense during your page visit will be omitted.
You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
For data transmission to the USA, the provider has joined the EU-US-data protection framework (EU-US-EU Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
Further information on Google's data protection regulations can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
8) Web analysis services
8.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, 4 Cookies are set by Google Analytics, which are stored as small text modules on your device and collect certain information. The scope of this information also includes your IP address, which Google cuts around the finishing digits in order to rule out direct personal relationship.
The information is transferred to Google server and processed there. Transmitters to Google LLC based in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activities for us and to provide other services associated with website usage and internet use. The IP address transmitted and reduced by your browser as part of Google Analytics is not merged with other Google data. The data collected as part of the use of Google Analytics 4 are saved for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the end device used, only take place if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Without your consent, the use of Google Analytics 4 during your page visit is omitted. You can revoke your consent granted at any time with effect for the future. To exercise your right of cancellation, please deactivate this service via the "cookie consent tool" provided on the website.
With Google we have concluded an order processing contract that ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https: // policies.google.com/technologies/Partner-sites
Demographic characteristics
Google Analytics 4 uses the special function "Demographic features" and can create statistics that make statements about the age, gender and interests of side visitors. This is done by analyzing advertising and information from third -party providers. This allows target groups for marketing activities. However, the collected data cannot be assigned to a specific person and will be deleted for a period of two months after storing.
Google Signals
Google Signals can be used as an extension to Google Analytics 4 to have cross -device reports created. If you have activated personalized advertisements and have linked your devices with your Google account, Google, subject to your consent to use Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, can analyze your usage behavior across devices and, among other things, to cross-equipment Conversions. We do not receive any personal data from Google, but only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information on Google Signals can be found at the following link: https://support.google.com/analytics /Answer/7532985? HL = de
Userids
As an extension to Google Analytics 4, the "Userids" function can be used on this website. If you have consented to Google Analytics 4 in accordance with Art. 6 Para. 1 Lit. a GDPR, set up an account on this website and register with this account on various devices, including conversions, your activities can be analyzed across devices become.
For data transmission to the USA, the provider has joined the EU-US-data protection framework (EU-US-EU Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
8.2 Google Tag Manager
This website uses the "Google Tag Manager", a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager offers a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling and using a uniform user interface. The Google Tag Manager itself does not store any information on user devices or reads them. The service also does not make any independent data analyzes. However, the Google Tag Manager transfers your IP address to Google and if necessary stored there. Also a transmission to Google LLC server. Is possible in the USA.
This processing is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this granting of consent, the use of Google Tag Manager does not fail during your page visit. You can revoke your consent granted at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.
For data transmission to the USA, the provider has joined the EU-US-data protection framework (EU-US-EU Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de
9) Retargeting/ remarketing and conversion tracking
9.1 Google Ads remarketing
This website uses retargeting technology of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google sets a cookie in the browser of its end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and, based on the pages you are visited,. In addition, data processing only takes place if you have agreed to Google that your Internet and app browser history from Google is linked to your Google account and information from your Google account is used for personalizing ads that you can use in the web regard. In this case, you are logged in during the page visit to our website on Google, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data from Google is temporarily linked to Google Analytics data in order to form target groups. As part of the use of Google Ads Remarketing, it can also be transmitted to the Google LLC server. come in the USA.
All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 Lit. a GDPR. Without this granting of consent, the use of retargeting technology during your page visit will be omitted.
You can revoke your consent granted at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
For data transmission to the USA, the provider has joined the EU-US-data protection framework (EU-US-EU Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
Details on the processing initiated by Google and how Google's dealings with data from websites can be found here: https://policies.google.com/technologies/partner-sites
Further information on Google's data protection regulations can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
9.2 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and as part of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads offer to draw attention to our attractive offers on external websites with the help of advertising materials (so -called Google AdWords). In terms of the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are pursuing the concern to show you advertising that is of interest to make our website more interesting for you and to achieve a fair calculation of the advertising costs.
The cookie for conversion tracking is set when a user clicks on an AdS display connected by Google. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and do not serve personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can see that the user has clicked on the display and has been forwarded to this page. Every Google Ads customer receives a different cookie. Cookies cannot therefore be tracked through Google Ads customers' websites. The information obtained using the conversion cookies is used to create conversion statistics for Google AdS customers who have chosen conversion tracking. Customers learn the total number of users who clicked on their ad and were forwarded to a page with a conversion tracking day. However, you do not receive any information with which users can be identified personally. As part of the use of Google Ads, it can also be transmitted to the Google LLC server. come in the USA.
You can find details on the processing initiated by Google Ads Conversion Tracking and dealing with Google's dealing with data from websites here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 Lit. a GDPR. You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
You can also permanently object to the setting of cookies through Google Ads Conversion tracking by downloading and installing the browser plug-in from Google available under the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be used or only used to a limited extent if you have deactivated the use of cookies.
Google's data protection regulations can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
For data transmission to the USA, the provider has joined the EU-US-data protection framework (EU-US-EU Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
10) Page functionalities
10.1 Judge.me
For the display of external customer reviews and/or an externally awarded quality mark, graphic elements of the following provider are integrated: Judge.me Ltd., C/O Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2ab, United Kingdom
If you call up a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to properly load the elements. Here, certain browser information, including your IP address, is transmitted to the provider.
If personal data is also processed, this is done in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the appealing design of our website.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.
In the case of data transmission to the provider location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.
10.2 Shopsync for Shopify
This website uses the Shopify app "ShopSync" of the ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
With the help of Shopsync, the newsletter service "Mailchimp" is synchronized with our Shopify account so that on the one hand updates in email lists from MailChimp (such as a opt-out of a newsletter recipient) are also automatically stored on Shopify and on the other hand. New contact details generated by contracts to Shopify are automatically transferred to MailChimp's email lists.
In the former case, data processing is carried out in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of our legitimate interest in the effective and cross -system -wide care of the files of advertising addressees and the efficient attention of legally significant status changes.
In the second case, exclusively on the basis of an express consent of the user in accordance with Art. 6 Para. 1 Lit. a GDPR after a conclusion of a contract on Shopify to include the MailChimp list, the first and surname, address and the email address together with transaction-related information (Purchase amount, time and date of purchase) transfer by ShopSync to Mailchimp.
Data transmitted in this way is not saved or kept by ShopSync after synchronization. All information synchronized between Shopify and MailChimp is transmitted via SSL technology (Secure Socket Layer), and all the information transmitted remains encrypted during the synchronization process.
The synchronization process requires the transmission of information about a secure connection to servers hosted by Amazon Web Services in the USA.
Further data protection information on ShopSync can be found here: https://www.shop-sync.com/privacy-policy
11) Tools and other
11.1 - Lexware Office
To complete the accounting, we use the service of the cloud-based accounting software of the following provider: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany
The provider processes input and output bills as well as the bank movements of our company to automatically record invoices, to match the transactions and to create financial accounting in a partially automated process.
If personal data is also processed, the processing is based on our legitimate interest in an efficient organization and documentation of our business processes.
11.2 Cookie Consent tool
This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications. The "cookie consent tool" is displayed in the form of an interactive user interface when calling for a checkout, on which consent for certain cookies and/or cookie-based applications can be issued. The use of the tool only invites all cookies/services subject to consent if the respective user grants the corresponding consent by checkline. This ensures that such cookies are only placed on the user's respective end device in the event of a granted consent.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.
If it comes to the processing of personal data (such as the IP address) in individual cases for the purpose of storing, assigning or logging in cookie settings, this takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest Legal, user -specific and user -friendly consent management for cookies and therefore in a legally compliant design of our website.
The further legal basis for processing is also Art. 6 Para. 1 lit. c GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically not necessary cookies dependent on the respective user consent.
If necessary, we have concluded an order processing contract with the provider that ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
11.3 Cloudflare
For security purposes, this website uses the service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA
The provider protects the website and the associated IT infrastructure from unauthorized third-party access, cyber attacks and viruses and malware. The provider collects the IP addresses of users as well as further data on your behavior on our website (especially called URLs and header information) in order to identify and ward off illegitimate side access and dangers. The recorded IP address is compared with a list of well-known attackers. If the IP address recorded is recognized as a security risk, the provider can automatically block it for page access. The information raised in this way is transferred to a server of the provider and saved there.
The data processing described is carried out in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of our legitimate interests in protecting the website against harmful cyber attacks and the maintenance of structure and data integrity and security.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.
For data transmission to the USA, the provider has joined the EU-US-data protection framework (EU-US-EU Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
11.4 Judge.me
To verify and publish customer reviews, we use the services of the following provider: Judge.me Ltd., C/O Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2ab, United Kingdom
Submit an assessment on our website, your first and last name, your email address, order date and number as well as name and international references (GTIN/ISDNF) will be collected to the provider and evaluated there to the legitimation of a customer assessment for to decide a specific order. These processing takes place in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by ensuring transaction -relatedness and preventing evaluation abuse. After completing the evaluation test and approval, the data will be deleted by the provider.
In the case of data transmission to the provider location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.
12) Rights of the person concerned
12.1 The applicable data protection law grants you the following data rights (rights of information and intervention) with regard to the processing of your personal data, whereby refer to the legal basis for the respective exercise requirements:
- Right of information in accordance with Art. 15 GDPR;
- Right to correction according to Art. 16 GDPR;
- Right to deletion according to Art. 17 GDPR;
- Right to restrict the processing in accordance with Art. 18 GDPR;
- Right to information in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to revocation granted consent in accordance with Art. 7 Para. 3 GDPR;
- Right to complaint according to Art. 77 GDPR.
12.2 Right of objection
If we process your personal data on the basis of our predominant interest in the context of a balancing of interests, you have the right to object to this processing with effect for the future for reasons that arise from your special situation.
If you make use of your right to object, we end the processing of the data concerned. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, fundamental rights and fundamental freedoms, or if the processing of assertion, exercise or defend legal claims serves.
If we are processed your personal data to operate direct mail, you have the right to object at any time to the processing of personal data relating to the purpose of such advertising. You can exercise the objection as described above.
If you make use of your right of objection, we end the processing of the data concerned for directives.
13) Duration of the storage of personal data
The duration of the storage of personal data is measured on the basis of the respective legal basis, in the processing purpose and- if relevant- also based on the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the data concerned will be stored until you cancel your consent.
If there are statutory retention periods for data that are processed in the context of legal transactions or legal transactions on the basis of Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention periods, provided that it is no longer necessary for the fulfillment of contract or contract are and/or on our part there is no legitimate interest in the further storage.
When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is saved until you exercise your right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can compelling legitimate grounds for The processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is saved until you exercise your right to object in accordance with Art. 21 Para. 2 GDPR.
Unless otherwise aroused from the other information of this explanation about specific processing situations, stored personal data will also be deleted if they are no longer necessary for the purposes for which they were collected or processed in any other way.
Copyright note: This data protection declaration was created by the specialist lawyers of the IT law firm under the doc-ID: ## itk-47ba3b874ffa8803bbe86981cc4c3e ## and is protected by copyright (https://www.it-recht-anzlei.de)