Privacy policy
Privacy Policy
Unless otherwise specified below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obligated to provide this data. Failure to provide it will have no consequences. This applies only to the extent that no other information is provided regarding the processing operations described below.
"Personal data" refers to any information relating to an identified or identifiable natural person.
Processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.
Your data isu.a. transferred to Canadain this processu.a. . An adequacy decision by the European Commission is in place for data transfers to Canada.
ContactControllerPlease
contact
us if you wish. The data controller is: Noah Brunner, Rettenbach 7, 6365 Kirch berg in Tirol , Austria , +43 664 348 2847,officefalkengrad@gmail.com
Customer Initiating Contact via Email
: If you contact us on your own initiative via email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to process and respond to your contact request.
If the contact serves the purpose of taking pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, which is grounded in our legitimate interest in processing and responding to your inquiry.In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and Processing When Using the Contact Form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data processing serves the purpose of establishing contact.
If the contact serves the purpose of carrying out pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Customer
AccountOrdersCustomer
AccountWhen you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. Your customer account will then be deleted.
Your data will beu.a. transferred to Canada. An adequacy decision by the European Commission is in place for data transfers to Canada.
Reviews and
AdvertisingData Collection When Posting a Comment or ReviewWhen
you comment on or review an article or post, we collect your personal data (name, email address, comment text) only to the extent that you provide it. The processing serves the purpose of enabling comments/reviews and displaying comments/reviews.
By submitting the comment/review, you consent to the processing of the transmitted data. The processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. Your personal data will then be deleted.
When your comment or review is published, the name and email address you provided will be displayed.
We use the review tool “shopauskunft.de” from Händlerbund Management AG (Kohlgartenstraße 11–13, 04315 Leipzig; “Shopauskunft”) on our websiteshopauskunft.de.
After placing your order, we would like to ask you to rate and comment on your purchase with us. To this end, we will contact you via email using the “Legally Compliant Review Request (RBA)” system . In doing so , we process the data related to your order (order number/invoice number, purchase amount, and shipping costs) as well as your email address. If necessary, we may also use this data to verify your review.
You may revoke your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation.
For more information on data protection when using Shopauskunft, please visit:
https://www.shopauskunft.de/datenschutz .
Use of your email address for sending newsletters
We use your email address solely for our own advertising purposes to send newsletters, regardless of the fulfillment of the contract, provided that you have expressly consented to this. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. To do so, you may unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Use of
Your Email Address for Sending Direct Marketing
We use the email address we received in connection with the sale of a product or service to send you electronic marketing for our own products or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is based on Article 6(1)(f) of the GDPR, based on our legitimate interest in direct marketing.You may object to this use of your email address at any time by notifying us.The contact details for exercising your right to object can be found in the legal notice.You can also use the link provided in the promotional email. No costs other than the standard data transmission fees will be incurred.
Use of Klaviyo
We use the services of Klaviyo Inc. (125 Summer St, Floor 7, Boston, MA 02111, USA; “Klaviyo”) to send our newsletter on a contract processing basis.
We share the information you provide during newsletter registration (email address, first and last name if applicable) with Klaviyo. Data processing serves the purpose of sending the newsletter and its statistical analysis.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any embedded links. In this context, we collect your personal data, such as your IP address, browser type, device, and the time of access. This data may be used to create usage profiles under a pseudonym. The data collected is not used to identify you personally. The collected data is used solely for statistical analysis to improve newsletter campaigns.
Your data is generally transmitted to Klaviyo servers in the United States and stored there. An adequacy decision by the EU Commission exists for the U.S., namely the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has obtained TADPF certification and is thus committed to complying with European data protection principles.
The processing of your personal data is based on Art. 6(1)(a) Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
For more information on data protection at Klaviyo, please visithttps://www.klaviyo.com/legal/privacy-notice as well ashttps://www.klaviyo.com/legal/data-processing-agreement.
Payment Service Provider
Use of PayPal Checkout
We use the PayPal Checkout payment service provided by PayPal (Europe) S.à.r. r.l. l.r.l. & Cie,S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal")on our websiter.l .S.C.A. . The purpose of this data processing is to enable us to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.
Credit card via PayPal, direct debit via PayPal,&“Pay Later” via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit check, if necessary, based on mathematical-statistical methods using credit reporting agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying PayPal.The provision of this data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide this data will result in the contract not being able to be concluded using the payment method you have selected.
Third-Party
ProvidersWhen paying via a third-party payment method,
the data required for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) of the GDPR. To facilitate this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Article 6(1)(b) of the GDPR. Examples of local third-party providers include:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
Purchase on account via PayPal
When paying via the “Purchase on account” payment method, the data required for payment processing is first transmitted to PayPal. To process this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”) in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. Ratepay may, if necessary, A credit check based on mathematical and statistical methods (probability or score values) using credit reporting agencies, following the procedure described above. The data processing is carried out for the purpose of conducting a credit check in preparation for entering into a contract. Processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protecting against payment default when Ratepay makes an advance payment. Further information on data protection and which credit bureaus Ratepay uses can be found athttps://www.ratepay.com/legal-payment-dataprivacy/and https://www.ratepay.com/legal-payment-creditagencies/ .
Further information on data processing when using PayPal can be found in the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Use of GDPR Legal Cookie
We use the GDPR Legal Cookie consent management tool from beeclever GmbH (Universitätsstraße 3, 56070 Koblenz a. Rh.; “beeclever”) on our website. The tool allows you to grant consent to data processing via the website, in particular the setting of cookies, as well as to exercise your right to revoke consent already granted.
The purpose of data processing is to obtain and document the necessary consents for data processing and thereby comply with legal obligations. Cookies may be used for this purpose. In doing so , the following information, among other things, may be collected and transmitted to beeclever : anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data will not be disclosed to any other third parties.
Data processing is carried out to fulfill a legal obligation pursuant to Article 6(1)(c) of the GDPR.
For more information on beeclever’s Terms of Use and Privacy Policy, please visit:https://gdpr-legal-cookie.com/pages/terms-conditionsas well as underhttps://gdpr-legal-cookie.com/pages/datenschutzerklarung.
Analysis
and Use of Shopify Statistics
. We use the statistics and analysis functions of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website within the scope of data processing on behalf of a client. Shopify is a subsidiary of Shopify Inc.(151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada) Affiliated company
: Data processing is carried out for the purpose of analyzing this website and its visitors. To this end, data is stored for marketing and optimization purposes and made available in reports, analyses, and statistics.u.a. The following device informationisu.a. collected and processed: information about the web browser, the IP address, the time zone, and some of the cookies installed on your device. When you navigate the website, information is also collected regarding the web pages or products you visit, the referrer URL (the website from which you accessed our website), and how you interact with the website. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to track how you navigate the website) are used for this purpose.
The use of cookies or similar technologies is based on your consent in accordance with Section 25(1), Sentence 1 of the TTDSGi.V.m. and Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
You can find more detailed information on data protection at Shopify under https://www.shopify.com/de/legal/datenschutz, “Information on the Data Processing Agreement” https://www.shopify.com/de/legal/dpa as well as information on the cookies used under https://www.shopify.com/de/legal/cookies.
Data Subject Rights and
Retention PeriodsRetention
PeriodsAfter the contract has been fully executed, the data will initially be stored for the duration of the warranty period; thereafter, it will be retained in accordance with statutory retention periods, particularly those under tax and commercial law, and then deleted upon expiration of these periods, unless you have consented to further processing and use.
Rights of the data subject
: Provided the legal requirements are met, you are entitled to the following rights under Articles 15 through 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
In addition, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1). based on Article 6(1)(f) of the GDPR, as well as against processing for the purposes of direct marketing.
Right to
lodge a complaint
with the supervisory authority
: Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
Right to
ObjectIf
the processing of personal data described here is
based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future.
Once you have objected, the processing of the data in question will be discontinued, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. Once an objection has been filed, we will cease processing the relevant data for direct marketing purposes.
Last updated: July 13, 2023
