Privacy policy

Privacy Policy

1. General information and principles of data processing

We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data when using our website is very important to us.

According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.

Data that cannot be linked to your person, such as anonymised data, is not personal data. Processing (e.g. collection, storage, retrieval, consultation, use, transmission, erasure or destruction) in accordance with Art. 4 No. 2 GDPR always requires your consent or another legal basis. Processed personal data must be erased as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to be complied with.

Here you will find information on how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.

Below you will also find information on the type and scope of the respective data processing, the purpose and the corresponding legal basis as well as the respective storage period.

This privacy policy applies only to this website. It does not apply to third-party websites to which we merely refer by means of a hyperlink. We cannot accept any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether they comply with the statutory data protection regulations. For information on how third parties handle your personal data, please refer directly to their websites.

 

2. Responsible body

Responsible for the processing of personal data on this website is (see imprint):

Azadivine GmbH

Maximilianstr. 40

80539 Munich

Germany

Phone: +49 89 189 426 340

Fax: +49 89 189 426 199

e-mail: info@azadivine.com

 

3. Data Protection Officer

You can also contact our data protection officer at any time if you have any questions about data protection:

Dr Georg F. Schröder, LL.M.

legal data Schröder Rechtsanwaltsgesellschaft mbH

Prannerstr. 1

80333 Munich

Phone: +49-89 - 954 597 520

Fax: +49-89 - 954 597 522

e-mail: georg.schroeder@legaldata.law

 

4. Provision and use of the website / server log files

a) Type and scope of data processing

If you use this website without transmitting data to us in any other way (e.g. by registering or using the contact form), we collect technically necessary data in the form of log data (so-called log files), which are automatically transmitted to our server by your terminal device, e.g:

• IP address
• Date and time of the enquiry
• URL of the retrieved subpage
• URL of the page from which the redirection to our site took place (so-called referrer URL)
• Access status/HTTP status code
• Type, language and version of the browser software
• Operating system

b) Purpose and legal basis of data processing

This processing is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for processing is Art. 6 para. 1 lit. f) GDPR. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

c) Storage period

As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. This is the case no later than seven days after visiting our website. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object to this aspect. Further storage may take place in individual cases if this is required by law.

 

5. Data collection for the implementation of pre-contractual measures and for the fulfilment of a contract concluded with you

a) Type and scope of data processing

We collect personal data about you in the pre-contractual area and upon conclusion of the contract. This concerns, for example, your first and last name, address, e-mail address, telephone number or bank details.

b) Purpose and legal basis of data processing

We collect and process this data exclusively for the purpose of implementing a contract concluded with you or for the fulfilment of pre-contractual obligations.

The legal basis for this is Art. 6 (1) (b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 para. 1 lit. a) GDPR.

c) Storage period

The data will be deleted as soon as it is no longer required for the purpose of its processing. In addition, there may be statutory retention obligations of up to 10 years, for example retention obligations under commercial or tax law in accordance with the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data when these statutory retention periods expire.

d) Proof of verification (such as business registrations)

In order to ensure the authenticity and legality of the use of our services, we may request proof from you such as business registrations or similar documents. This evidence will only be used to verify your identity and authorisation to use our services and will be stored and processed securely in accordance with the applicable data protection regulations.

e) Account blocking and handling of data

In the event of an account suspension, we reserve the right to continue to store and process your personal data to the extent necessary to fulfil legal obligations, clarify legal matters or prevent misuse. Blocked accounts will be handled in accordance with our privacy policy, whereby all personal data will be treated securely and confidentially.

6. Contact form

a) Type and scope of data processing

On our website, we give you the opportunity to contact us using a form provided. As part of the process of sending your enquiry via the contact form, reference is made to this privacy policy to obtain your consent.

If you make use of the contact form, the following personal data may be processed by you:

• Customer number
• First name
• Surname
• address
• Postcode
• Location
• Country
• E-mail address
• Telephone number
• Subject
• Content of the message

When using the contact form, your personal data will not be passed on to third parties.

b) Purpose and legal basis

The purpose of providing your contact details is to be able to respond to your enquiry.

The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a) GDPR, which you can revoke at any time for the future.

c) Storage period

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request).

Mandatory statutory provisions - in particular retention periods under the German Commercial Code (HGB) or the German Fiscal Code (AO) - remain unaffected by this.

  

7. Contact by e-mail

  

a) Type and scope of data processing

You can contact us by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us, the metadata (time stamp, other recipients) and any personal data you provide when contacting us.

Please note that e-mails are always sent unencrypted and therefore the possibility of third parties gaining knowledge of them cannot be ruled out. You can also contact us by post at any time.

b) Purpose and legal basis

The purpose of data processing is to respond to your enquiry appropriately. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. There is a legitimate interest in processing the above-mentioned personal data to process your enquiry.

c) Storage period

The duration of the storage of the above-mentioned data depends on the background of your contact. Your personal data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer required due to statutory retention obligations. This may result, for example, from the processing of your request.

  

8. Application option

 

a) Type and scope of data processing

You can apply to us by e-mail. When you apply, we collect and store the data that you send us by e-mail (see also section 10 of this privacy policy).

b) Purpose and legal basis of data processing

We only process your data for the purpose of processing your application. Your data will not be passed on to third parties. The legal basis for the processing is Art. 88 para. 1 GDPR in conjunction with. § 26 para. 1 BDSG. If, in the event of a rejection, you give us your consent to the further storage of your data so that we can return to your application in the future if necessary, the legal basis is Art. 6 para. 1 lit. a) GDPR.

 

c) Storage period

If we are unable to offer you a position, we will store your data for a maximum of six months after the end of the application process in accordance with Section 61b (1) ArbGG in conjunction with Section 15 AGG. § 15 AGG. The start of the period is the receipt of the rejection letter.

If you have given us your consent to include you in our applicant pool, we will store your data for a maximum of two years.

d) Data transfer

Your data will only be received by the departments involved in the decision (responsible HR or specialist departments, management).

In addition, we may be obliged by law, official or court order to transmit your data to public authorities (e.g. public prosecutor's office, police, supervisory authorities, tax office, social security institutions, etc.).

Other data recipients may be those bodies for which you have given us your consent to transfer data.

 

9. Newsletter

  

a) Type and scope of data processing

You can subscribe to a free regular e-mail newsletter on our website. In order to be able to send you the newsletter regularly, we need your e-mail address.

Your data will be forwarded to our newsletter service provider in connection with the newsletter dispatch. Your data will not be passed on to third parties beyond this. 

We use the so-called double opt-in procedure for sending newsletters. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to the newsletter being sent. For this purpose, we will send you a confirmation e-mail in which you are asked to confirm that you wish to receive newsletters from us in future by clicking on a corresponding link.

This is to ensure that only you, as the owner of the e-mail address provided, can subscribe to the newsletter. Your confirmation must be made promptly after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter in the newsletter form (e.g. surname, first name, email address).

When you register for the newsletter, we also store your IP address assigned by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. For the confirmation e-mail sent out for control purposes (double opt-in), we also store the date and time of the click on the confirmation link and the IP address assigned by the Internet service provider (ISP).

b) Purpose and legal basis

The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter.

The processing of your email address for the newsletter mailing is based on the declaration of consent voluntarily given by you and revocable at any time for the future in accordance with Art. 6 para. 1 lit. a) GDPR and § 7 para. 2 no. 3 UWG.

In addition, the processing is based on our legitimate interest in documenting the proof of the required consent in accordance with Art. 6 para. 1 lit. f) GDPR.

c) Storage period

Your e-mail address will be stored for as long as you have subscribed to the newsletter. After you unsubscribe from the newsletter, your e-mail address will be deleted unless you have consented to further use of your data or there is another legal basis for processing.

In connection with the newsletter dispatch, your data will be forwarded to our newsletter service provider: Klavyio Inc, 125 Summer St Floor 6, Boston, MA 02111, USA.

d) E-mail advertising for similar goods and services

We may use your e-mail address, which we receive in connection with the sale of goods or services, to advertise our own similar goods and/or services. In accordance with Section 7 (3) UWG, we do not need to obtain separate consent from you for this. You can object to this use at any time by sending a message to the contact details given in the legal notice without incurring any costs other than the transmission costs according to the basic rates. We will also inform you of this each time we use your email address for direct marketing purposes. After receipt of your objection, the processing of your e-mail address for advertising purposes will be stopped immediately. The legal basis for the processing is Section 7 (3) UWG and Article 6 (1) (f) GDPR.

 

10. Use of cookies

 

We use cookies. Cookies are small files that are stored on your computer and saved by your browser. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. For example, some cookies can recognise the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. Among other things, cookies enable us to make our website more user-friendly and effective for you, for example by tracking your use of our website and identifying your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programmes or contain viruses. Various types of cookies are used on our website, the nature and function of which we would like to explain below.

Temporary cookies / session cookies

Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. With the help of this type of cookie, it is possible to record your session ID. This allows various requests from your browser to be assigned to a common session and makes it possible to recognise your end device when you visit the website at a later date. These session cookies expire at the end of the session.

Persistent cookies

So-called persistent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Legal basis and storage period

Due to the purposes of use described, the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice ("cookie banner") provided by us on the website , the legal basis is Art. 6 para. 1 lit. a) GDPR.    

As soon as the data transmitted to us via the cookies is no longer required for the purposes described above, this information is deleted. Further storage may take place in individual cases if this is required by law.

Configuration of the browser settings

Most web browsers are preset to accept cookies automatically. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may then no longer be able to use all the functions of our website.

You can also use your browser settings to delete cookies already stored in your browser. It is also possible to set your browser to notify you before cookies are stored. As the various browsers may differ in their respective functionalities, we ask you to use the respective help menu of your browser for the corresponding configuration options.

Deactivating the use of cookies may require the storage of a permanent cookie on your computer. If you delete this cookie, you will need to set it again for it to take effect again.

Further information on configuring the cookie settings in the respective browsers can be found at:

 

• Edge
• Safari
• Chrome
• Firefox
• Opera

Cookie categories

We use the following categories of cookies:

a) Necessary cookies

Necessary cookies ensure functions without which our website cannot be used as intended. These strictly necessary cookies are used, for example, to ensure that logged-in users remain logged in at all times when accessing various subpages. These are so-called first-party cookies, which are only set and used by us. These cookies do not require consent. You can deactivate cookies in your browser at any time.

b) Functional cookies

With the help of functional cookies, we can also extend the functionality of our website to show you additional useful information or optimise the presentation of our website. The data collected using such cookies may vary depending on the purpose of the cookie and is listed directly with the respective tool used.

 

c) Statistics cookies

Statistics cookies can be used to collect information about the use of a website in order to improve its attractiveness, content and functionality. This concerns, for example, the time spent on the page, the subpages accessed and the functions used (click behaviour).

d) Marketing cookies

Marketing cookies can be used to display interest-based advertising to website visitors and to measure the effectiveness of advertising campaigns. With the help of these cookies, visitors can be recognised on other websites and shown personalised advertisements there.

 

Content Delivery Networks (CDN) and hosting

Our website uses a so-called Content Delivery Network (CDN). A CDN is a network of powerful servers that cache content at various locations around the world. A CDN essentially has two tasks: firstly, to provide content in the shortest possible time and secondly, to relieve the web host by distributing the data traffic. CDNs transmit two types of content: Static and dynamic content. All website visitors receive static content in the same form, such as video content from streaming services or code frameworks (e.g. Javascript, jQuery). Dynamic content is initially customised to the user and only created at the moment of the request. This includes content that is sent via web applications, email or online shops and is personalised. In order to be able to use the latter, information about the website visitor must first be transmitted to the CDN. The legal basis for the use of a CDN and the transmission of your data to it is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for a technically flawless and fast presentation of our website and the relief of our IT infrastructure. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice. In detail, we use

Service provider for external hosting and CDN: Wix.com Ltd, Nemal St. 40, 6350671 Tel Aviv, Israel.

  

11. Plugins and tools

Google Tag Manager

We use the Google Tag Manager tool on our website. Google Tag Manager is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-Mail: support-deutschland@google.com ("Google"), which allows marketers to manage website tags via an interface.

The Google Tag Manager only implements tags. Tags are small code elements on the website that are used, among other things, to measure traffic and visitor behaviour, record the impact of online advertising and social channels, use remarketing and targeting and test and optimise the website.

This means that no additional cookies are used. No personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level - in particular if you have selected the objection solution for Google Analytics described above or have made the corresponding settings in your browser - it will remain in place for all tracking tags if they are implemented with Google Tag Manager.

Further information on data protection at Google can be found here:

http://www.google.com/intl/de/policies/privacy

Data protection conditions for advertising:

www.google.de/intl/de/policies/technologies/ads

 

 

12. Analysis tools and advertising

  

Google Analytics

a) Type and scope of data processing    

We use the tracking tool Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-Mail: support-deutschland@google.com ("Google“).

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. 

On behalf of the operator of this website, Google will use this information to systematically analyse your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. 

If individual pages of our website are accessed, the following data is stored:

• Three bytes of the IP address of the user's accessing system (anonymised
• IP address)
• The website called up
• The website from which the user accessed the page on our website (referral URL)
• The subpages that are called up from the page called up
• The time spent on the website
• The frequency of visits to the website

We use Google Analytics with activated IP anonymisation. This means that the

IP addresses are shortened by the last octet (e.g. 192.168.79.***; so-called IP masking). It is no longer possible to assign the shortened IP address to the calling computer or end device of the user.

b) Purpose and legal basis of data processing

The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

c) Storage period

The stored data will be deleted by us as soon as it is no longer required for our recording purposes. In our case, the maximum storage period is 24 months.

d) Right of objection

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de    

Further information on the terms of use of Google Analytics: 

www.google.com/analytics/terms/de.html

 

More information on data protection from Google Analytics: 

https://support.google.com/analytics/answer/6004245?hl=de

  

You can also change your consent in the cookie settings at any time.

 

13. Social Media

a) Type and scope of data processing

Our website contains links to our profiles on social networks. We provide information there about our products and current special offers. No data is transferred to the operators of the social networks when our website is loaded, but only when you actively follow the link to our profile on the respective social network. If you access our profile page on a social network, the operator of the social network may place cookies on your device, regardless of whether you have an account with the network or whether you are logged in there. Cookies are data packets that mark the user's end device with a specific identifier. Cookies are primarily used to display personalised advertising to visitors to social networks, including our profile pages.

This is done, for example, by displaying adverts to the user on the pages of the social network from advertising partners of the social network whose websites the user has previously visited.

Cookies also enable us to compile statistics on the use of our profile page (e.g. number of page views, user categories). If we receive such statistical analyses from the operator of the social network, the data is anonymised by the operator beforehand, i.e. it is not possible for us to assign usage data to an individual user. However, if you are logged in to the social network, the operator of the social network may be able to assign the visit to our profile on the social network to your existing account there.

We have no influence on which data is collected and transmitted by the operator of the social network, to which third party recipients the data is transmitted by the operator of the social network and how long the data is stored by the operator of the social network. Please refer to the privacy policy of the respective social network.

We do not pass on your data collected on our profile page on the respective social network to third parties unless this is necessary on the basis of your consent or to fulfil a contract with you. If we use external service providers (e.g. in the area of IT), this takes place in the form of order processing with the service provider, on the basis of which the service provider is obliged to process data in accordance with our instructions. In addition, data may be passed on to courts and competent law enforcement and supervisory authorities on the basis of official orders and legal obligations.

You are not obliged to provide us with your data on our profile pages on social networks. If you do not want the operators of the social networks to collect data from you on our profile pages, you can prevent this by not accessing our profile pages.

We delete private messages that you send us via social networks one year after the last communication with you. We always leave public posts from you (e.g. in our timeline) published permanently until you expressly request their deletion.

We reserve the right to delete illegal content published by users on our profile page on the respective social network, e.g. copyright infringements or statements relevant under criminal law.

According to the case law of the European Court of Justice, we are jointly responsible with the operator of the respective social network for the operation of our profile page with regard to compliance with data protection regulations. In this context, the operator of the social network provides the associated IT infrastructure and the website of the social network and is generally the primary point of contact when it comes to the processing of your data on the pages of the social network (e.g. information or deletion). However, you can also assert your legal rights against us. In this case, we will forward your enquiry to the operator of the social network.

 

b) Purpose and legal basis of data processing

The purpose of processing your data on our profile page on the respective social network is to provide information about our offers and services and to respond to any enquiries on our profile page. The legal basis for the processing is Art. 6 para. 1 f) GDPR. In this respect, public relations work is covered by our legitimate interests within the meaning of the provision.

  

c) Social networks used

Below you will find the contact details of the respective operators of the social networks we use as well as a link to the respective privacy policy for further information on data protection on the social networks:

Facebook:

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland

www.facebook.com/about/privacy/

Instagram:

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland

help.instagram.com/519522125107875

  

14. Product tests

  

a) Type and scope of data processing

By giving your consent as part of our product tests, you agree that we are authorised to collect and process your personal data. Your feedback as part of the product tests helps us with further product development. Your personal data will not be analysed. Reference is made to this privacy policy in the declaration of consent.

  

If you have consented to our product tests, the personal data provided by you in the context of product tests may be processed. This may include the following data:

• Surname, first name
• Address
• Skin type

Insofar as information on special categories of personal data (e.g. allergies, health data, etc.) is disclosed in the context of product tests, your consent also relates to this data.

When participating in our product tests, your personal data will not be passed on to third parties.

  

b) Purpose and legal basis

We will process the data provided for each product test in the relevant information sheet and in the questionnaire for product improvement and advertising purposes.

The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a) GDPR, which you can revoke at any time for the future without this revocation having negative consequences for you or incurring costs.

  

c) Storage period

Your data will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Unless we are legally obliged to store your data for a longer period of time. This data may be stored together with other data relating to you that we receive on the basis of other legal grounds.

  

15. Data transmission

We only pass on your personal data to third parties if:

• you have given your express consent for this in individual cases in accordance with Art. 6 para. 1 lit. a) GDPR;
• this is legally permissible and required in accordance with Art. 6 para. 1 lit. b) GDPR for the fulfilment of a contractual relationship with you or the implementation of pre-contractual measures (e.g. to payment, shipping, delivery or collection service providers);
• there is a legal obligation to pass on the data in accordance with Art. 6 para. 1 lit. c) GDPR (e.g. to authorities, social insurance institutions, health insurance funds, supervisory authorities and law enforcement authorities);
• the disclosure pursuant to Art. 6 para. 1 lit. f) GDPR is necessary to safeguard legitimate company interests, as well as for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data (e.g. to debt collection service providers);
• we use external service providers (so-called processors) for processing in accordance with Art. 28 GDPR, who process data in accordance with our instructions and are obliged to handle your data carefully (e.g. in the areas of IT or marketing).
• We work together with various payment service providers to offer you secure and reliable payment options. These service providers process your payment information in accordance with the applicable data protection regulations. Our payment service providers include shopPay, PayPal, Apple Pay, G Pay and, in the case of payment by credit card, the respective payment service provider. Further information on the specific data protection practices of these service providers can be found in their respective privacy policies.

When transferring data to external bodies in third countries, i.e. outside the European Union (EU) or the signatory states to the Agreement on the European Economic Area (EEA), we ensure that these bodies treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other suitable guarantees.

16. Hosting by Shopify

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify’s servers. As part of Shopify’s aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the adequate level of data protection is guaranteed by adequacy decision of the European Commission. If data is transferred to Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA), the adequate level of data protection is also ensured by an adequacy decision of the European Commission.

Further information on data protection at Shopify can be found on the following website:

https://www.shopify.de/legal/datenschutz

17. Sales partner

We work closely with various sales partners to ensure the successful sale of our products. As part of this cooperation, it may be necessary for us to process personal data that is transmitted to us by our sales partners. The type of data processed as well as the purpose and scope of data processing can be found in the respective data protection declarations of our sales partners. The data protection declarations can be found at the respective sales partners through which you purchase our products. These may be online shops, marketplaces or other sales platforms. In all other respects, the provisions set out in this privacy policy apply.

If you have any questions or concerns regarding data processing in the context of our cooperation, we or our data protection officer will be happy to assist you at any time.

18. Integration of external links

We sometimes include external content or links to third-party offers (e.g. other web shops) on our website. Please note that in these cases the respective data protection provisions of the external providers apply. We have no influence on the processing of personal data by these third-party providers.

19. Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organisational security precautions, which are regularly reviewed and adapted to technological progress.

  

This includes the use of recognised encryption methods (SSL or TLS). However, unencrypted data, for example when sent by unencrypted e-mail, may be read by third parties. We have no influence over this. It is the responsibility of the user to protect the data provided by them against misuse by means of encryption or in any other way.

  

20. Changes to the privacy policy

We reserve the right to update this declaration at any time if necessary.

  

21. Your legal rights

Below you will find your legal rights in relation to your personal data. Details can be found in Articles 7, 15-22 and 77 GDPR. You can also contact us as the controller (section 2) or our data protection officer (section 3) in this regard.

  

a) Right to withdraw your consent under data protection law in accordance with Art. 7 para. 3 sentence 1 GDPR

You can revoke your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the legality of the processing carried out up to the point of revocation.

  

b) Right to information in accordance with Art. 15 GDPR

You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g. the purposes of processing, the categories of personal data processed, the recipients and the planned duration of storage or the criteria for determining the duration.

  

c) Right to rectification and completion in accordance with Art. 16 GDPR

You have the right to request the rectification of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

  

d) Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR

You have the right to erasure if the processing is not necessary. This is the case, for example, if your data is no longer required for the original purposes, if you have revoked your declaration of consent under data protection law or if the data has been processed unlawfully.

  

e) Right to restriction of processing pursuant to Art. 18 GDPR

You have the right to restrict processing, e.g. if you believe that the personal data is incorrect.

  

f) Right to data portability pursuant to Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.

g) Right to object pursuant to Art. 21 GDPR     

You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.

In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

  

h) Automated decision-making in individual cases including profiling in accordance with Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing - including profiling - except in the exceptional circumstances mentioned in Art. 22 GDPR.

No decision-making based solely on automated processing - including profiling - takes place.

  

i) Complaint to a data protection supervisory authority pursuant to Art. 77 GDPR

You can also lodge a complaint with a data protection supervisory authority at any time, for example if you are of the opinion that the data processing does not comply with data protection regulations.

Competent supervisory authority:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18

91522 Ansbach

Germany

  

Phone: +49 (0) 981 180093-0

Fax: +49 (0) 981 180093-800

e-mail: poststelle@lda.bayern.de

+ + + + + + + + + + + + +

Status of the privacy policy: 06/06/2025