Data protection

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for concluding a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files
You can visit our websites without providing any personal information.  
Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the accessed page, date and time of retrieval, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offer. 
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the standard contractual clauses of the EU Commission.

Contact

Controller
Contact us if you wish. The controller for data processing is: Josephin Rötzsch, An Der B87, 8, 04838 Jesewitz Germany, 017646083858, bulli1403@web.de

Proactive contact by the customer via e-mail
If you proactively contact us by e-mail, we will collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves to process and answer your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of personal data concerning you, which is based on Art. 6 Para. 1 lit. f GDPR, for reasons arising from your particular situation.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Orders      

Collection, processing and transfer of personal data during orders 
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to process your inquiries. The provision of data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the performance of a contract with you.  
Your data may be passed on, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to a minimum.
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the standard contractual clauses of the EU Commission.

Shipping service provider      

Transfer of e-mail address to shipping companies for information about shipping status
We will pass on your e-mail address to the transport company as part of contract processing, provided you have expressly agreed to this during the ordering process. The transfer serves the purpose of informing you about the shipping status by e-mail. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out on the basis of the consent until revocation.

Data subject rights and storage period

Duration of storage
After complete contract processing, the data will first be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, pursuant to Art. 21 Para. 1 GDPR, you have a right to object to processing based on Art. 6 Para. 1 f GDPR, as well as to processing for the purpose of direct marketing.

Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:

Saxon Commissioner for Data Protection and Transparency
Maternistraße 17
01067 Dresden
Tel.: +49 351 85471101
Fax: +49 351 85471109
E-mail: post@sdtb.sachsen.de

Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 Para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.