Privacy policy
Privacy
Policy: Unless otherwise specified below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obligated to provide this data. Failure to provide such data has no consequences. This applies only to the extent that no other information is provided regarding the processing operations described below.
“Personal data” refers to any information relating to an identified or identifiable natural person.
Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.
Your data isu.a. transferred to Canadain this processu.a. . An adequacy decision by the European Commission is in place for data transfers to Canada.
Contact the Data Controller: Please contact us if you wish. The data controller is: Noah Brunner, Rettenbach 7, 6365 Kirch berg in Tirol , Austria , +43 664 348 2847, officefalkengrad@gmail.com
Unsolicited Contact by the Customer via Email
: If you contact us on your own initiative via email, we will collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to handle and respond to your contact request.
If the contact serves to carry out pre-contractual measures (e.g., consultation regarding a purchase interest, preparation of a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If you contact us for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, which is grounded in our overriding legitimate interest in processing and responding to your inquiry.In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and Processing When Using the Contact Form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to establish contact with you.
If the contact serves to carry out pre-contractual measures (e.g., consultation regarding a purchase interest, preparation of a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Customer Account Orders Customer
Account
When
you open a customer account, we collect your personal data to the extent specified there. The purpose of this data processing is to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your customer account will then be deleted.
necessary.
Your data will beu.a. transferred to Canada. An adequacy decision by the European Commission is in place for data transfers to Canada.
Reviews and
Advertising: Data Collection When Posting a Comment or Review
When you comment on or review an article or post, we collect your personal data (name, email address, comment text) only to the extent that you provide it. The purpose of this processing is to enable you to post a comment or rating and to display comments and ratings.
By submitting your comment or rating, you consent to the processing of the data you have provided. This processing is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your personal data will then be deleted.
When your comment or review is published , the name and email address you provided will be displayed.
We use the “ shopauskunft.de” review toolshopauskunft.defrom Händlerbund Management AG (Kohlgartenstraße 11–13, 04315 Leipzig; “Shopauskunft”).
After you place your order, we would like to ask you to rate and comment on your purchase from us. To this end, we will contact you via email using the “Legally Compliant Review Request (RBA)” system . In doing so , we process the data related to your order (order number/invoice number, purchase amount, and shipping costs) as well as your email address. If necessary, we may also use this data to verify your review.
You may withdraw your consent at any time by using the corresponding link in the email or by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
For more information on data protection when using Shopauskunft, please see:
https://www.shopauskunft.de/datenschutz.
Use of Your Email Address for Sending Newsletters
. We use your email address—regardless of the fulfillment of the contract—exclusively for our own promotional purposes to send newsletters, provided you have expressly consented to this. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. To do so, you can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Use of Your Email Address for Sending Direct Marketing
We use your email address—which we received in connection with the sale of a product or service—to send you electronic marketing messages for our own products or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in direct marketing.You may object to this use of your email address at any time by notifying us. The contact information for exercising your right to object can be found in the legal notice.You can also use the link provided for this purpose in the promotional email. No costs other than the transmission fees according to the standard rates will be incurred.
Use of Klaviyo:
We use the services of Klaviyo Inc. (125 Summer St, Floor 7, Boston, MA 02111, USA; “Klaviyo”) to send our newsletter under a data processing agreement.
We share the information you provide when signing up for the newsletter (email address, first and last name if applicable) with Klaviyo. The data is processed for the purpose of sending the newsletter and analyzing its performance.
To evaluate newsletter campaigns, the newsletters we send contain a 1x1-pixel image (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and, if applicable, whether you have clicked on any embedded links. In this context, we collect your personal data, such as your IP address, browser type, device, and the time of access. This data may be used to create usage profiles under a pseudonym. The collected data is not used to identify you personally. The collected data is used solely for statistical analysis to improve newsletter campaigns.
Your data is generally transmitted to and stored on Klaviyo’s servers in the United States. An adequacy decision by the European Commission exists for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has obtained TADPF certification and is therefore committed to complying with European data protection principles.
The processing of your personal data is based on Art. 6(1)(a) Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system.You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
For more information on data protection at Klaviyo, please visithttps://www.klaviyo.com/legal/privacy-noticeas well as underhttps://www.klaviyo.com/legal/data-processing-agreement .
Payment
Service Providers: Use of PayPal Checkout.
We use the PayPal Checkout payment service on our website r.l. ,provided by PayPal (Europe) S.à.r.l. et Cie,S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal").The purpose of data processing is to enable us to offer you payment through the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.
Credit card via PayPal, direct debit via PayPal&, “Pay Later” via PayPal.
&
For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit check, if necessary, based on mathematical and statistical methods using credit reporting agencies. To this end, PayPal transmits the personal data required for a credit check to a credit bureau and uses the information received regarding the statistical probability of default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (scores) calculated using scientifically recognized mathematical and statistical methods, which incorporate, among other things, address data. Your legitimate interests are taken into account in accordance with legal requirements. The data processing serves the purpose of conducting a credit check for the initiation of a contract. The processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protecting against payment default when PayPal makes an advance payment.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying PayPal. The provision of this data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide this data will result in the contract not being able to be concluded using the payment method you have selected.
Third-Party Providers
When paying via a third-party payment provider,
the data required for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) of the GDPR. To process this payment method, PayPal may then forward the data to the respective provider. This processing is based on Article 6(1)(b) of the GDPR. Examples of local third-party providers include:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- and giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
. Purchase on account via PayPal
: When paying via the “Purchase on account” payment method, the data required for payment processing is first transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”) in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. Ratepay may, if necessary, A credit assessment based on mathematical and statistical methods (probability or score values) using credit reporting agencies, following the procedure described above. The purpose of this data processing is to conduct a credit check for the purpose of entering into a contract. The processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protecting against payment default when Ratepay makes an advance payment. For more information on data protection and which credit bureaus Ratpay uses, please visit https://www.ratepay.com/legal-payment-dataprivacy/and for https://www.ratepay.com/legal-payment-dataprivacy/ https://www.ratepay.com/legal-payment-creditagencies/.
more details on data processing when using PayPal, please refer to the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Use of GDPR Legal Cookie
We use the GDPR Legal Cookie consent management tool from beeclever GmbH (Universitätsstraße 3, 56070 Koblenz a. Rh.; “beeclever”) on our website. This tool allows you to grant consent to data processing via the website—in particular, the use of cookies—and to exercise your right to withdraw consent that has already been granted.
The purpose of data processing is to obtain and document the necessary consents for data processing and thereby comply with legal obligations. Cookies may be used for this purpose. In doing so , the following information, among other things, may be collected and transmitted to beeclever : anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data will not be disclosed to any other third parties.
Data processing is carried out to fulfill a legal obligation pursuant to Article 6(1)(c) of the GDPR.
For more information on beeclever’s Terms of Use and Privacy Policy, please visit:https://gdpr-legal-cookie.com/pages/terms-conditionsas well as the sectionhttps://gdpr-legal-cookie.com/pages/datenschutzerklarung.
onhttps://gdpr-legal-cookie.com/pages/datenschutzerklarung.
the use of Shopify analytics
. We use the statistics and analytics features of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) as part of a data processing agreement. Shopify is a subsidiary of Shopify Inc.(151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada) Affiliated Company
: Data processing is carried out for the purpose of analyzing this website and its visitors. To this end, data is stored for marketing and optimization purposes and made available in reports, analyses, and statistics.u.a. The following device informationisu.a. collected and processed: information about the web browser, the IP address, the time zone, and some of the cookies installed on your device. As you navigate the website, information is also collected regarding the web pages or products you visit, the referrer URL (the website from which you accessed our site), and how you interact with the website. To do this, we use technologies such as cookies, web beacons, tags, and pixels (electronic files that track how you navigate the website).
The use of cookies or similar technologies is based on your consent in accordance with Section 25(1), Sentence 1 of the TTDSGi.V.m. and Article 6(1)(a) of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
You can find more detailed information on data protection at Shopify under https://www.shopify.com/de/legal/datenschutz, “Information on the Data Processing Agreement” a https://www.shopify.com/de/legal/dpa s well as information on the cookies used at https://www.shopify.com/de/legal/cookies.
Data Subject Rights and
Retention Period
: Duration of Storage.
After the contract has been fully fulfilled, the data will initially be stored for the duration of the warranty period, and thereafter in accordance with statutory retention periods—particularly those under tax and commercial law—and then deleted upon expiration of these periods, unless you have consented to further processing and use.
Rights of
the Data Subject
: Provided the legal requirements are met, you are entitled to the following rights under Articles 15 through 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
In addition, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6( based on Article 1(f) of the GDPR, as well as against processing for the purposes of direct marketing.
Right to
lodge a complaint
with the supervisory authority
: Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
Right to
Object:
If the processing of personal data described here is
based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future.
Once an objection has been filed, the processing of the data in question will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. Once an objection has been filed, we will cease processing the relevant data for direct marketing purposes.
Last updated: July 13, 2023