Data protection

(1) Information about the collection of personal data

(1.1) In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. B. name, address, e-mail addresses, user behavior.
(1.2) The person responsible in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR) is

Nasre Mokhtari
Josephinestrasse 4
Dresden, 01067
Germany
slimyforce@gmail.com
 

For privacy issues, contact us: Slimyforce@gmail.com or our postal address with the addition "Privacy Policy".

(1.3) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also state the specified criteria for the storage period.

(2) Your Rights

(2.1) You have the following rights towards us with regard to your personal data:

  • right to information,
  • right to rectification or erasure,
  • right to restriction of processing,
  • right to object to processing,
  • Right to data portability.

To exercise your rights, you can reach us using the above contact details for the person responsible or the data protection officer.

(2.2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

(3) Objection or revocation against the processing of your data


(3.1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the admissibility of the processing of your personal data after you have given it to us.

(3.2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not necessary in particular to fulfill a contract with you, which is shown by us in the following description of the functions. If you exercise such an objection, we ask that you explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either stop or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing .

(4) Obligation to provide personal data

(4.1) There is no obligation to provide the personal data collected on this website. It is not required by law or contract or required for the conclusion of a contract. Insofar as data collection is necessary to display the website, the website cannot be displayed correctly without data collection. In these cases, data is collected automatically when the website is made available or on the basis of your consent.


(4.2) It is usually not possible to contact us or subscribe to our newsletter without providing the minimum data.


(4.3) For orders in our online shop, the corresponding mandatory information is required for the conclusion of the purchase contract and the execution of the payment. A purchase is not possible without this information.

(5) Hosted through Shopify

Our online shop uses the Shopify platform. This is provided to us by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. We have concluded an order processing contract with Shopify in accordance with Art. 28 GDPR, in which the processing of your personal data by Shopify is regulated.
All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the case of the transmission of data to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision.
Insofar as Shopify also processes your data on servers in the USA and has promised within the framework of the order processing contract that it will only do so in accordance with the legal regulations. Shopify may use other sub-service providers to process your personal data and use Google Analytics and Cloudflare, among others. The legal basis for the transmission of your personal data to Shopify servers in the USA is Art. 49 (1) lit. b GDPR, as it is required for the execution of the contract or pre-contractual measures in our online shop. In the opinion of the EU Commission, there is no adequate level of data protection in the USA. In particular, there is a risk of access by US security authorities without EU citizens being able to appeal against this.
For more information about Shopify's privacy policy, visit the following website: https://www.shopify.de/legal/datenschutz
Shopify is used on the basis of Article 6 (1) (f) GDPR. We have a legitimate interest in our website being displayed as reliably as possible.
(5.1) We may also process the data you provide to inform you about similar products or to send you transactional emails.

(5.2) Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years.

(5.3) In addition to the above data, Shopify also processes the following data for us:
  • IP address
  • Information in the context of reporting and statistics from cookies set by Shopify, e.g. B. the website that may have linked you to our shop, how often you visited our website, information about your device or browser, products stored in the shopping cart. For more information about the cookies used by Shopify when you visit our store, see the "Use of Cookies" section above.
  • Information about triggered orders
  • If you contact Shopify phone support, in order to process your support request, Shopify will process your phone number, audio content and information you provide during the call, and information to verify your identity, if applicable
  • If you use Shopify's online chat for support requests, Shopify will process the information you provide, such as your name, email address, chat log and information you provide during the call, and information where applicable, to process your support request to verify your identity. At the same time, the above technical information is collected
(5.4) The legal basis for this processing is Art. 6 Paragraph 1 lit. B. shopping cart, checkout, navigation and the fulfillment of your order or questions about your orders.

(5.5) In the other cases, the legal basis lies in our legitimate interest in the secure and trouble-free provision of our online shop and is therefore Article 6 Paragraph 1 lit. f GDPR.

(5.6) As described in the section on cookies, certain cookies are set by Shopify to enable Shopify to improve the platform or to enable us to further develop and adapt our product range and online shop. Based on the information in these cookies, Shopify creates reports and evaluations on the use of the shop. Depending on whether you have given your consent to tracking in the consent banner, these cookies are deleted when you close your browser window or stored until the specified storage period expires. This affects the level of detail of reporting and analysis. The legal basis is our legitimate interest or that of Shopify in these purposes and thus GDPR Art. 6 Para. 1 lit f. and, if applicable, your consent and thus GDPR Art. 6 Para. 1 lit a. The consent can be revoked at any time via the link in the footer of the website.
(5.7) The use of cookies, which are absolutely necessary for the function of our online shop, takes place on the legal basis of § 25 Para. 2 No. 2 TTDSG. Other cookies are only stored with your consent, the legal basis in this case is § 25 Para. 1 TTDSG in conjunction. DSGVO Art. 6 Para. 1 lit a. The consent can be revoked at any time via the link in the footer of the website.
(5.8) Insofar as Shopify processes your data for the use of such Shopify offers that involve a direct customer relationship between you and Shopify, Shopify does so on its own responsibility. Information about this processing can be found in Shopify's data protection information: https://www.shopify.de/legal/datenschutz

(5.9) To prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process is encrypted using TLS technology.

(5.10) With the development and administration of our website, we have the service provider HASH-COM GmbH instructed. HASH-COM GmbH has access to the technical data mentioned above. In order to ensure data protection-compliant processing, we have an order processing contract with you HASH-COM GmbH closed.

(6) Use of cookies

(6.1) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in the browser you are using and through which certain information flows to the place that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. Insofar as these cookies are not absolutely necessary for the operation of this website, the cookies are only stored if you have given your consent in the cookie banner that is displayed. In the case of this website, this is only the case in the online shop.


(6.2) The storage of cookies, which are absolutely necessary for the function of the website, takes place on the legal basis of § 25 Para. 2 No. 2 TTDSG. Other cookies are only stored with your consent, the legal basis in this case is § 25 Para. 1 TTDSG in conjunction. DSGVO Art. 6 Para. 1 lit a. Consent can be obtained via the link in the footer of the website can be revoked at any time.


(6.3) This website uses the following types of cookies, the scope and functionality of which are explained below:

  • Transient cookies (see 6.3.1)
  • Persistent cookies (see 6.3.2)

(6.3.1) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. Session cookies also include cookies that we use to ensure that the website is displayed correctly on the end device used. The session cookies are deleted when you log out or close the browser.


(6.3.2) Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.


(6.3.3) Other technologies: These functions are not based on cookies, but on similar technical mechanisms such as Flash cookies, HTML5 objects or an analysis of your browser settings. The result is also that we can use the techniques described below. Here, too, you can of course consent or object.


(6.4) Mandatory functions that are technically necessary to display the website: The technical structure of the website requires that we use technologies, in particular cookies. Without these techniques, our website cannot be displayed (fully correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot opt ​​out of these cookies if you wish to use our website. The individual cookies are listed in the cookie overview here can see, evident. The legal basis for this processing is Article 6 Paragraph 1 Clause 1 Letter f GDPR. 15


(6.5) Optional cookies when you give your consent: We only set various cookies with your consent, which you can select using the so-called cookie consent tool when you visit our website for the first time. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use different browsers or end devices, to recognize you during a visit or to display advertising (possibly also to targeting ads to interests, measuring the effectiveness of ads, or showing interest-based ads). The legal basis for this processing is Article 6 Paragraph 1 Clause 1 Letter a GDPR. The revocation of your consent is possible at any time without affecting the admissibility of the processing until the revocation.


(6.6) The functions we use, which you can select and revoke individually via the Consent Manager, are explained in this data protection declaration.

(6.7) You can configure your browser settings according to your wishes and e.g. B. refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.

(7) Contact via email

(7.1) When you contact us by e-mail, the data you provide (your e-mail address, possibly your name and telephone number and your message) will be stored by us in order to answer your questions. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.


(7.2) This data is processed by us in order to be able to respond to your request. The data processing takes place on a contractual basis (Art. 6 Para. 1 S. 1 lit. b DSGVO) as far as questions relating to the purchase of our products are concerned. For the rest of the customer service and the answering of your inquiries, the processing takes place on the basis of legitimate interests (Art. 6 Para. 1 S. 1 lit. f DSGVO), because it enables satisfactory customer advice.

(8) Newsletters

(8.1) Our e-mail newsletter is sent via »Klaviyo«, 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter . This transfer takes place in accordance with Article 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that the data is usually transferred to a Klaviyo server in the USA and stored there. Klaviyo uses this information to send and evaluate the newsletter on our behalf. Furthermore, Klaviyo can, according to its own information, use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletter or for economic purposes, in order to determine from which countries the recipients come. However, Klaviyo does not use the data of our newsletter recipients to write to them or pass them on to third parties.

(8.2) To protect your data in the USA, we have a data processing agreement with Klaviyo ("Data Processing Agreement"), in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with their data protection regulations and in particular not to be passed on to third parties.
You can view Klaviyo's privacy policy here:
https://www.klaviyo.com/privacy

(8.3) credentials
To register for the newsletter, it is sufficient if you enter your e-mail address. Optionally, we ask you to provide your first and last name. This information is only used to personalize the newsletter. We also ask you to optionally enter your date of birth and salutation. We only use this information to adapt the content of the newsletter to the interests of our readers.

(8.4) Statistical surveys and analyses
The newsletters contain a so-called "web beacon", ie a pixel-sized file that is retrieved from the Klaviyo server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, are initially collected. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on the retrieval locations (which can be determined using the IP address) or the access times.
The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of Klaviyo to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
(8.5) Online retrieval and data management
There are cases in which we direct newsletter recipients to Klaviyo's websites. For example, our newsletter contains a link with which the newsletter recipient can access the newsletter online (e.g. in the event of display problems in the e-mail program). Furthermore, newsletter recipients can subsequently correct their data, such as their e-mail address. Likewise, Klaviyo's data protection declaration can only be accessed on their website.
In this context, we would like to point out that cookies are used on Klaviyo's websites and personal data is therefore processed by Klaviyo, its partners and the service providers used (e.g. Google Analytics). We have no influence on this data collection. For more information, see Klaviyo's privacy policy. We would also like to draw your attention to the possibility of objecting to data collection for advertising purposes on the websites http://www.aboutads.info/choices and http://www.youronlinechoices.com (for the European area).

(8.6) Termination/Revocation
You can cancel the receipt of our newsletter here at any time, ie revoke your consent. At the same time, your consent to it being sent via Klaviyo and the statistical analyzes expire. A separate revocation of the dispatch via Klaviyo or the statistical evaluation is unfortunately not possible.
You will find a link to cancel the newsletter at the end of each newsletter.
(8.7) Legal bases of the General Data Protection Regulation
In accordance with the provisions of the General Data Protection Regulation (GDPR), which came into force on May 25, 2018, we inform you that the consent to the sending of e-mail addresses is based on Article 6 Paragraph 1 lit. a, 7 GDPR and Article 7 Paragraph 2 No. 3 or para. 3 UWG. The use of the shipping service provider Klaviyo, the implementation of statistical surveys and analyzes and the logging of the registration process are based on our legitimate interests in accordance with Article 6 Paragraph 1 Letter f GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system that serves both our business interests and meets user expectations.
We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements of Article 21 GDPR. The objection can be made in particular against processing for direct advertising purposes.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to Slimyforce@gmail.com or via a link provided for this purpose in the newsletter.

(8.8) We check at regular intervals whether it is necessary to store the e-mail addresses in our mailing list, in particular we delete undeliverable or unsubscribed addresses. We will delete your consent and e-mail address as well as the associated user data if you revoke your consent, after 3 years at the latest. Further storage is based on our legitimate interest in being able to prove in the event of any legal disputes that consent was given at the time of dispatch and thus on the basis of Article 6 Paragraph 1 Sentence 1 lit. f GDPR.

(9) Use of payment service providers

(9.1) PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal, your payment data will be sent to PayPal (Europe) Sarl et Cie, SCA, 22- 24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), continue. The transfer takes place in accordance with Art. 6 Paragraph 1 lit. b GDPR and only to the extent that this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values. Further data protection information, including information on the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

(9.2) Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd. , 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we send the information you provided during the ordering process together with the information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Article 6 (1) (b) GDPR. Your data will only be passed on on the basis of the legitimate interest in payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this. For more information about Shopify Payments' privacy policy, visit the following web address: https://www.shopify.com/legal/privacy
Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
(9.3) stripes
If you decide to use a payment method offered by the payment service provider "Stripe", the payment will be processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we will forward the information you provided during the ordering process along with the information about your order (name, address, account number, sort code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Paragraph 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this. You can find more information about data protection at “Stripe” at the following Internet address: https://stripe.com/de/privacy#translation.

(9.4) Klarna
On our website we offer, among other things, payment with the services of Klarna. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). Klarna offers various payment options (e.g. installment purchase). If you decide to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. You can read details about this in Klarna's data protection declaration under the following link: https://www.klarna.com/de/datenschutz/.
Klarna uses cookies to optimize the use of the Klarna checkout solution. The optimization of the checkout solution represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Cookies are small text files that are stored on your end device and do not cause any damage. They remain on your device until you delete them. Details on the use of Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf. Your data is transmitted to Klarna on the basis of Article 6 Paragraph 1 Letter a GDPR (consent) and Article 6 Paragraph 1 Letter b GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.

(10) Shipping Service Provider

Your orders will be shipped via our shipping service provider DHL. In order to send you the desired items, we transmit the name and delivery address to the respective shipping service provider.

(11) Facebook Pixel and Custom Audiences

(11.1) We have integrated program code from Facebook on our website that sets a cookie (the so-called Facebook pixel). The Facebook pixel will only be integrated if you give us your consent. This pixel enables Facebook to track your visit to our site and the corresponding sub-pages as well as any actions you have taken on our site and, if necessary, to assign your Facebook profile and other data that Facebook has about you. In this context, it is recorded in particular whether you have previously clicked on an advertisement placed by us on Facebook or other websites. The assignment also takes place across different devices or browsers as long as you are logged in to them with your Facebook profile. This can also be the case if you do not have a Facebook window open in your browser.

(11.2) The Custom Audiences function enables us to determine which target groups and Facebook users these ads are displayed to when we place ads on Facebook. So we can e.g. B. set that our advertisements are shown to users who have previously visited our website. The function also enables us to measure the success of our advertisements and thus use our advertising budget as sensibly as possible. The data collected by Facebook can only be viewed by us in the form of anonymous reports and is only used to place advertising.

(11.3) The legal basis for storing cookies is Section 25 (1) TTDSG in conjunction with DSGVO Art. 6 Para. 1 lit a. The legal basis for the processing of personal data is your consent and thus Article 6 (1) (a) GDPR. You can revoke your consent at any time via the link in the footer.

(11.4) The Facebook Pixel and Custom Audiences are an offer from Meta Platforms Ireland Ltd ("Meta"), 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland. You have the option to prevent Meta and its partners from placing advertisements. You can edit the settings for Facebook ads under the following link: https://www.facebook.com/ads/website_custom_audiences/. For more information on how Meta processes your data, see Meta's privacy policy: https://www.facebook.com/policy.php

(11.5) We are jointly responsible with Meta for processing your data in connection with tracking your activities on our website and the advertisements we place - but not for further processing by Meta. We have entered into a joint processing agreement with Meta, which is available here:

https://www.facebook.com/legal/controller_addendum

(12) Tiktok pixels

(12.1) We have included program code from TikTok on our website that sets a cookie (the so-called TikTok pixel). The Facebook pixel will only be integrated if you give us your consent. If you have given your express consent, this code will be used to connect to the TikTok servers when you visit our website in order to track your behavior on our website. For example, when you buy a product on our website, the TikTok pixel is triggered and saves your actions on our website in one or more cookies. Personal data such as your IP address and email address, as well as other information such as device ID, device type and operating system can also be transmitted to TikTok. TikTok uses email or other login or device information to identify users of our website and to associate their actions with a TikTok user account.

(12.2) As part of our placement of ads on TikTok, we are able to determine which target groups and TikTok users these ads are displayed to. So we can e.g. B. set that our advertisements are shown to users who have previously visited our website. The function also enables us to measure the success of our advertisements and thus use our advertising budget as sensibly as possible. The data collected by TikTok can only be viewed by us in the form of anonymous reports and is only used to place advertising.

(12.3) The legal basis for storing cookies is Section 25 (1) TTDSG in conjunction with DSGVO Art. 6 Para. 1 lit a. The legal basis for the processing of personal data is your consent and thus Article 6 (1) (a) GDPR. You can revoke your consent via this in your cookie settings at any time.

(12.4) The Tiktok pixel is an offer from TikTok Information Technologies UK Limited (6th Floor, One London Wall, London EC2Y 5EB. You have the option of prohibiting TikTokta and its partners from placing advertisements. You can revoke your consent at any time revoked with effect for the future.To exercise your revocation, please deactivate this service in the cookie banner provided on the website.

(12.5) We are jointly responsible with TikTok for collecting and transmitting the data as part of this process. This is for the following purposes: measurement and insight reporting. The following processing is therefore not covered by joint responsibility: Determining and improving the relevance of advertisements for natural persons. Optimization of ad delivery by dick. Improving user security, research, development to maintain and improve the integrity of tickt ob's products and services. For joint responsibility, we have concluded a corresponding agreement in the middle of Talk, which can be accessed here: https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms . It defines the respective responsibilities for the fulfillment of the obligations under the GDPR regarding joint responsibility. The contact details of the responsible company and the data protection officer of TikTok can be found at: https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE
We have agreed with TikTok that TikTok can be used as a point of contact for the fulfillment of the rights of those affected. The responsibility for the rights of those affected remains unaffected by this. We transmit the data within the scope of joint responsibility on the basis of the legitimate interest in accordance with Art. 6 (1) lit f GDPR

(12.6) Your data will generally be processed within the EU or the EEA. In the event that personal data is transferred to countries outside the EU or the EEA, this data transfer takes place within the framework of standard contractual clauses (Article 46 GDPR), which represent contracts adopted by the European Commission for the transfer of personal data to so-called third countries ; In addition, we take additional measures where possible. In order to ensure an appropriate level of data protection, TikTok also carries out case-by-case reviews of transfers of personal data to third countries and reviews and analyzes the legal regulations in relevant third countries.

(13) Google Ads and Remarketing

(13.1) This website uses Google Ads and various conversion tracking and remarketing technologies offered by Google Ireland Limited ("Google"). Google Ads will only be integrated if you give us your consent.

(13.2) With the help of these technologies, we and Google can e.g. B. understand whether a user clicked on one of our ads and was redirected to our website. We do not receive any information with which users can be personally identified, only statistics on the total number of users who clicked on an ad and were redirected to a page with a conversion tracking tag. Likewise, within the scope of so-called remarketing, we can address our advertising to visitors to our website and display it on other websites or social media.

(13.3) As part of Google Ads, Google processes the following data, among other things: browser language, browser type, clicked ads, cookie ID, cookie information, date and time of the visit, length of visit, pages visited, content on which the user is interested, IP address, referrer URL, usage data, web request.

(13.4) The legal basis for storing cookies is Section 25 (1) TTDSG in conjunction with DSGVO Art. 6 Para. 1 lit a. The legal basis for the processing of personal data is your consent and thus Article 6 (1) (a) GDPR. You can revoke your consent at any time via this link.

(13.5) We have concluded an order processing contract with Google, which regulates the processing by Google for us. We have no influence on any further data processing by Google. Insofar as Google transmits data to third countries, this is done on the basis of the so-called EU standard contractual clauses.

Third Party Information: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, Fax: +353 (1) 436 1001.
Privacy Policy: http://www.google.de/intl/de/policies/privacy

(13.6) Google also processes your data in the USA. In the USA, no level of data protection equivalent to that in the EU is guaranteed. We must draw your attention to the risks that may arise from this. Among other things, it can happen that US authorities such as secret services or law enforcement agencies can access your data without us or you being aware of this. We also do not want to withhold from you the fact that you may then not be able to appeal against this access by the authorities. The transfer of your data to the USA by Google takes place on the basis of the consent you have given and thus on the basis of Article 49 paragraph 1 letter a DSGVO.

(14) Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin D04 E5W5, Ireland. Google Tag Manager is a solution that allows marketers to manage website tags from one interface. The Tag Manager tool itself (which implements the tags) does not collect any personally identifiable information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. By using the Tag Manager, your IP address will be transmitted to Google, as this is necessary for the function.

(15) Beeclever / Cookie Consent Tool

(15.1) We use the cookie consent tool "GDPR Legal Cookie" from beeclever GmbH, Universitätsstraße 3, D-56070 Koblenz a. Rh. ("beeclever") to obtain effective user consent for cookies that require consent and cookie-based applications.

(15.2) By integrating a corresponding JavaScript code, a banner is displayed to users when the page is accessed, in which consent can be given for certain cookies and/or cookie-based applications by ticking the box. The tool blocks the setting of all cookies that require consent until the respective user gives their consent by ticking the box. This ensures that such cookies are only set on the respective end device of the user if consent has been given.

(15.3) So that the cookie content tool can clearly assign page views to individual users and can individually record, log and save the consent settings made by the user for the duration of the session, when our website is accessed by the cookie content tool, certain user information (including the IP address) is collected, transmitted to the beeclever server and stored there.

(15.4) This data processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website. Another legal basis for the data processing described is Art. 6 (1) (c) GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent. Further information on the use of data by beeclever can be found at https://beeclever.de/pages/datenschutz

(16) Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. Using this service will show you our location and make it easier to get there.
As soon as you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google's servers and stored there. This can also result in transmission to the servers of Google LLC. come in the US. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of Google's legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
We also have a legitimate interest in using Google Maps to optimize our online shop. The corresponding legal basis for this is Article 6 (1) (f) GDPR. However, we only use Google Maps if you have given your consent to do so.
If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.
You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl /de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/#

(17) Review Reminder and Review by Judge.me

If you have given us your express consent to this during or after your order in accordance with Art. 6 Paragraph 1 lit. PO Box 7403, Jackson, Wyoming 83002, USA, to have them email you a review reminder. You can revoke your consent at any time by sending a message to the person responsible for data processing or to the rating platform Judge.me. Our website also includes functions for collecting and displaying product ratings from the Judge.me service. Certain personal data is processed to verify customer ratings as part of the rating process. If you submit a rating on our website, your first and last name, your email address, order date and number as well as your name and, if applicable, international references (GTIN/ISDNF) will be collected, sent to Judge.me and evaluated there in order to verify the legitimacy a customer rating for a specific order. This processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in guaranteeing the authenticity of customer reviews by ensuring that they are related to the transaction and preventing review abuse. After the evaluation has been checked and approved, the data will be deleted from Judge.me. All of the aforementioned processing may also result in the transmission of personal data to the servers of Judge.me LLC in the USA. We have concluded an order processing contract with Juge.me. Insofar as the processing is carried out by Juge.me in the USA, this is based on the standard contractual clauses concluded with Jugde.me. You can find the data protection provisions of Judge.me at: https://judge.me/privacy

(18) Hey Charles -Contact us, track shipments and recommend purchases via WhatsApp

You can contact us via WhatsApp and start a conversation. We are responsible within the meaning of Art. 4 No. 7 GDPR for subsequent data processing in connection with WhatsApp. To offer and use WhatsApp, we use the software solution from Charles GmbH, Gartensstr. 86-87, 10115 Berlin, as part of an order processing contract. Charles stores all personal data in the EU. As an official WhatsApp partner, Charles uses the WhatsApp Business API with the result that no other third parties or WhatsApp have access to your communication content within the scope of our responsibility.

The use of WhatsApp is solely subject to the agreements you have made with WhatsApp. In accordance with the WhatsApp terms of use, we have your telephone number and username when you contact us. We use this and other information you provide to recognize you and your preferences and to reply to your WhatsApp messages. The legal basis here is your consent to being contacted in accordance with Art. 6 (1) (a) GDPR. We will also send you newsletters via WhatsApp if you have given us your consent to do so. You also have the option of using WhatsApp to put together your shopping cart. In this case, the data processing is based on Art. 6 (1) (b) GDPR.

You can revoke any consent you have already given at any time with effect for the future. According to the GDPR, you also have the right to information, correction, transferability and deletion of your personal data as well as the right to restrict or object to certain processing. You also have the option of complaining to the supervisory authority responsible for you.

For more information, please refer to the following data protection regulations:

Charles GmbH: www.hello-charles.com/privacy-policy

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/legal/privacy-policy-eea

(19) Social Networks

(19.1) General Information
(19.1.1) We maintain a company profile as described below on the following social networks to facilitate communication with users and prospects and to provide further information or content: Facebook, Twitter, Instagram, YouTube,
(19.1.2) Please note that users' personal data may be processed outside the European Union. This can lead to risks for users, e.g. For example, enforcing user rights can be more difficult.
(19.1.3) If you leave us messages or make comments on these profiles, we process your personal data in order to communicate with you. This represents a legitimate interest; the legal basis is Art. 6 (1) 1 lit f GDPR. We do not store any further communication data outside of these networks.
(19.1.4) The general terms and conditions of the operators of these platforms apply. Please note that we cannot provide any further information about the personal data processed by these operators during your visit to the networks mentioned above. We encourage you to refer directly to the information provided by these platforms and have included links to the privacy policies or other relevant information below.
(19.1.5) In the event that you request information or wish to assert your rights as a data subject, we would like to point out that these can most effectively be asserted with the providers. Only they have access to the data of their users and can take appropriate measures and provide information directly. If you still need support, you can of course contact us.

(19.2) Instagram
(19.2.1) Information about the provider: Instagram is an offer from Meta Platforms Ireland Ltd ("Meta"), 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland.
(19.2.2) Instagram's privacy policy can be viewed here:
https://help.instagram.com/519522125107875/?maybe_redirect_pol=0

(19.3) Information on the Facebook fan page
(19.3.1) The Facebook fan page is an offer from Meta Platforms Ireland Ltd ("Meta"), 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland. Together with Meta, we are responsible for collecting the personal data of visitors to our Facebook fan page - but not for further processing by Meta. We have entered into a joint processing agreement with Meta, which is available here:
https://www.facebook.com/legal/terms/page_controller_addendum
(19.3.2) Meta has agreed to take care of the rights of data subjects. For example, users can send information or deletion requests directly to Meta. However, your rights as a data subject (in particular to information, deletion, objection and complaints to the competent supervisory authority) are in no way restricted by our agreements with Meta.
(19.3.3) See "Things Done and Provided by You and Others" in the Facebook Privacy Policy for more information about the personal information included, such as information about the types of content users view or interact with, or about user actions:
https://www.facebook.com/policy
(19.3.4) Regarding the information collected about the user's devices, information can be found under "Device information" - this can e.g. B. IP addresses or information on the operating system, browser type, language settings or cookie information. Meta also collects and uses this information to provide site operators with analytics services called "page insights" that help them understand how users interact with their sites and related content. Information from Meta about the "Page Insights" can be found here:
https://www.facebook.com/legal/terms/information_about_page_insights_data
(19.4) Twitter
(19.4.1) Information about the provider: Twitter is an offer from Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
(19.4.2) You can view Twitter's privacy policy here:
https://twitter.com/de/privacy

(19.5) YouTube
(19.5.1) Information about the provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
(19.5.1) You can view YouTube's privacy policy here:
http://www.google.de/intl/de/policies/privacy/

Status: January 2023