Privacy policy
1.introduction and contact details of the person responsible
1.1 We welcome you to our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to identify you personally.
1.2 The controller in charge of data processing on this website, pursuant to the General Data Protection Regulation (GDPR), is Saalim Asanov, Auf dem Schafberg 24, 65933 Frankfurt am Main, Germany. Please contact us by e-mail at [email protected]. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2 Data collection when visiting our website
2.1 If you use our website for purely informational purposes, i.e. without registering or collecting information directly, we only collect the data that your browser automatically transmits to the server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Reference source/reference from which you reached the page
- Browser used
- Operating system used
- Your IP address (in anonymized form if necessary)
We process this data in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
3.hosting & content delivery network
Shopify: We use the provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") to host our website and display the page content. The data is also transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc. All data collected on our website is processed on the provider's servers. We have concluded an order processing contract with the provider, which ensures the protection of our visitors' data and prevents unauthorized disclosure to third parties. The European Commission guarantees an adequate level of data protection for data transfers to Canada. For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
4.cookies
We use cookies - small text files that are stored on your end device - to make your visit to our website attractive and to enable certain functions. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for longer and save page settings (so-called "persistent cookies"). The storage duration of cookies can be found in the cookie settings of your web browser. If personal data is processed by cookies, this is done in accordance with Art. 6 para. 1 lit. b GDPR to fulfill the contract, in accordance with Art. 6 para. 1 lit. a GDPR if consent has been given or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and efficient design of the page visit. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be restricted.
5. contact
When you contact us (e.g. via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it is clear from the circumstances that the matter has been conclusively clarified and provided that there are no statutory retention obligations.
6 Data processing for order processing
6.1 For contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR. If we owe you updates for goods with digital elements or for digital products as part of a contract, we will use the contact details provided when ordering (name, address, email address) to inform you about upcoming updates within a legally prescribed period in accordance with Art. 6 para. 1 lit. c GDPR. Your contact details will be used exclusively for notifications of updates owed by us and will only be processed to the extent necessary for the respective information. In order to process your order, we work together with the following service providers who support us in the execution of concluded contracts. Personal data is transmitted to these service providers as described below.
6.2 Use of payment service providers (payment services) - PayPal: One or more online payment methods of the provider PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg are available on this website. If you select a payment method of the provider for which you make an advance payment, the payment data you provide during the ordering process (name, address, bank and credit card details, currency, transaction number) and information about the order content will be passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing and only to the extent necessary for this purpose. If you select a payment method for which we make advance payments, you will also be asked to provide certain personal data during the order process (first and last name, street, house number, zip code, city, date of birth, e-mail address, telephone number, data on an alternative means of payment, if applicable). In order to safeguard our legitimate interest in determining your ability to pay, we transmit this data to the provider in accordance with Art. 6 para. 1 lit. f GDPR for a credit check. On the basis of the personal data provided and other data (e.g. shopping cart, invoice amount, order history, payment experience), the provider checks whether the selected payment option can be granted with regard to payment and default risks. The credit report may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized, mathematical-statistical procedure. The score values take into account address data, among other things. You can object to the processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
7 Rights of the data subjects
7.1 Under applicable data protection law, you have the following data subject rights vis-à-vis the controller (rights to information and intervention), whereby reference is made to the legal basis cited for the respective requirements:
- Right to information pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to information pursuant to Art. 19 GDPR
- Right to data portability pursuant to Art. 20
- Right to withdraw consent granted pursuant to Art. 7 (3) GDPR
- Right to lodge a complaint pursuant to Art. 77 GDPR
7.2 RIGHT OF OBJECTION
If we process your personal data as part of a balancing of interests on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. You can exercise your objection as described above. If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.
Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if relevant - additionally by the statutory retention periods (e.g. retention periods under commercial and tax law). When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If there are statutory retention periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
