1. INFORMATION WE COLLECT
We collect information to provide better services and improve our business. We collect information in two ways:
Information you give us
Some of our services require you to sign up for an account, provide information for a contest or award, or link an account through a social network. The information we collect may include email, name, phone number, address, or credit card information. Such information is necessary to render the services requested and/or to provide contractual services. Legal basis for such data processing is Article 6 (1) lit. a, b or f GDPR. Unless statutory provisions provide otherwise, the data will be deleted if the purpose ceases to apply, e.g. if the services are performed in full or if you unsubscribe from our services.
When you contact us, either by email or by using our contact form, we collect the data you have submitted with your request (e.g. name. email) and may keep a record of your communication to help solve any issues you might be facing. Legal basis for such data processing is Article 6 (1) lit. b and lit. f GDPR. Unless statutory provisions provide otherwise, the data will be deleted if the purpose ceases to apply, e.g. if we have processed your request.
Information we gather from surveys
If you take part in one of our surveys, we store your contact data and the information you provide as part of the survey. We use this data in anonymous form only. It is not possible to draw any conclusions about your person. We publish the results of the survey on our website or share them with partner companies, e.g. advertising partners.
The legal basis for such data processing is Art. 6 (1) lit. f) GDPR. The data will be deleted as soon as the purpose of the storage has ceased to exist.
Information we get from your use of our services
We may collect usage information when you visit different parts of our site or use our applications. We may also automatically collect certain technical information such as your hardware category and operating system. Such information is necessary to provide our services and is used in anonymized or pseudonymized form only. Legal basis for such data processing is Article 6 (1) lit. f GDPR. Unless statutory provisions provide otherwise, the data will be deleted if the purpose ceases to apply..
We do not share personal information with companies, outside organizations and individuals. When you provide us with personal information for communication reasons or to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason.
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at firstname.lastname@example.org
We may disclose your personal information if you violate our Terms of Service or if we are required by law to do so. We may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We will share personal information with companies, outside organizations or individuals if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable law, regulation, legal process or enforceable governmental request, detect, prevent, or otherwise address fraud, security or technical issues or protect against harm to the rights, property or safety of our users or the public as required or permitted by law.
4. THIRD-PARTY SERVICES
Third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as online marketing platform providers and payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them to render their services to us.
When you click on links on our site and store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
To place an order, you must create an account using your email address and a personal password.
When placing an order via our store, we collect personal data required to process your order (name, billing address, shipping address, phone number, payment method, email address). These data may be transferred to payment and shipping service providers.
Legal basis for such data processing is Article 6 (1) lit. b GDPR. Due to legal regulations, we are obliged to store data for orders, including addresses and payment details, for 10 years.
If you choose to pay by credit card, the information required to process the order (such as credit card number, purchase price and quantity, time of purchase, shipping address, phone number and email address) will be transferred to Stripe (Stripe Payments Europe Ltd. ). Stripe can forward this data to Stripe Inc. based in the USA. In this case, the data is transferred to a server in the USA. Stripe Inc. has a Privacy Shield certification, which ensures an adequate level of data protection.
5. COOKIES WE USE
We use Google Analytics, a web analytics service provided by Google Inc. , 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”), on our website. Google Analytics uses so-called “cookies”, text files that are saved on your computer and that enable your use of the website to be analyzed. The cookie-generated information about your use of our website is usually transmitted to and stored on a Google server in the United States. However, if you are in a country that is a member state of the European Union or a contracting party to the Agreement on the European Economic Area, and if IP address anonymization has been activated on our website, Google will first truncate your IP address. Only by way of exception will the full IP address be transmitted to a Google server in the United States and truncated there. Google will use this information on our behalf for the purposes of analyzing how you use our website, compiling reports on website activity and providing further services related to website and internet use to the website operator. The IP address transmitted through Google Analytics from your browser will not be associated with any other data held by Google. You can disable cookies by setting your browser accordingly; however, if you do this you may not be able to use the full functionality of our website. You can also prevent the data generated by the cookie and related to your use of this website (including your IP address) being transmitted to and processed by Google by downloading and installing the browser plug-in available here: http://tools. google.com/dlpage/gaoptout?hl=en
You have the opportunity to receive a newsletter containing targeted information via our web service or new products. In this case we must collect and save your email address, which we will only use to send the newsletter. You can unsubscribe via our website at anytime. At the end of the newsletter you will find a link intended for this purpose and provides a simple way to cancel the newsletter. In this case your data will be deleted.
For sending the newsletter we use MailChimp, a service provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. The email addresses are processed on our behalf on a MailChimp server in the USA. MailChimp has a Privacy Shield certification that ensures an adequate level of data protection. The email address will be used to send the newsletter.
The newsletters contain a so-called “web-beacon”, i. e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. These beacons are used to collect the IP address and the time the newsletter was opened as well as the information as to whether the subscriber has clicked on a link contained in the newsletter. MailChimp uses this data to create reports for us about how an email campaign performed and what actions subscribers took.
If you have expressly consented to receiving our newsletter, the legal basis for such processing of personal data is Art. 6 (1) lit. a GDPR. In case we are entitled to send a newsletter based on your previous purchase of goods or services, legal basis for such processing of personal data is § 7 (3) of the German Act Against Unfair Competition (UWG). In this case, the legal basis for the processing of personal data for the purpose of analysing the campaign performance is our legitimate interest (Art. 6 (1) lit. f) GDPR) in improving the quality of our newsletter.
Unless statutory provisions provide otherwise, the data will be deleted if the purpose ceases to apply, e.g. if you unsubscribe from the newsletter.
We work hard to protect our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold, however no website is entirely secure. You should protect the account information in your possession as well. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received. If you have any questions about the security of your personal information, you can contact us at email@example.com.
8. QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at firstname.lastname@example.org.