1. server data collection and hosting
1a. Security of data transmission
1b. Transfer to third countries (Art. 13 para. 1 f, 44 GDPR)
2. use and disclosure of personal data
2a. General information
2b. Contract fulfilment
2c. Contact form and enquiry by e-mail
2d. Registration
3. cookies
Consent Tool CookieYes
4. google analytics
5. google ads
6. meta pixel
7. newsletter Hubspot
8. social networks
8a. Facebook page
8b. Linkedin
8c. Instagram page
8d. TikTok account
9. YouTube
10. WhatsApp button
11. payment service provider
12. rights of data subjects
Data protection declaration
The legal provisions for the protection of your data can be found in the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications and Telemedia Data Protection Act (TTDSG).
Revotion GmbH, Hüttenstraße 4, 40215 Düsseldorf, represented by its managing directors Tim Londong and Jasper Severin Ehmcke, is the controller within the meaning of the data protection regulations.
Below you will find information on which personal data - this is all data that identifies you or makes you identifiable, such as name, address, email address or user behaviour - we collect during your visit to our website and how it is used. If you have any questions, please do not hesitate to contact us at support@revotion.de.
You also have the right to lodge a complaint with a supervisory authority in the event of unlawful use of the data. The authority responsible for us is
State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de
1. server data collection and hosting
Our website is hosted by "Shopify", Shopify International Limited, Victoria Buildings, 2nd Floor 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
When you visit our website, various server statistics are automatically saved, which your browser transmits to our provider's server. The name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider are logged.
This data is used to statistically analyse visits to our website and cannot be assigned to specific persons.
The legal basis for data collection is Art. 6 para. 1 lit. f) GDPR. This data is not merged with other data sources. The IP address is anonymised. Our legitimate interest in collecting this data is based on the fact that we can use the data to optimise our offer for users, e.g. by preventing access from malicious pages or optimising access via certain browsers, and that the delivery of the page to the visitor is only made possible by logging the IP address.
In principle, you have the right to object to this data collection. As an exception, this does not apply here, as it would otherwise be impossible to use the site.
The data will be deleted as soon as it is no longer required for the above-mentioned purposes.
1a. Security of data transmission
To transfer your data, we use a secure server with SSL technology (Secure Socket Layer) with 256-bit encryption. This means that your data is transmitted to us securely and cannot be read by unauthorised persons.
Your passwords are hashed, i.e. stored cryptologically, and are thus protected against access by third parties as well as by the person responsible.
1b. Transmission to third countries (Art. 13 para. 1 f, 44 GDPR)
Data may be transferred to third countries via subcontractors or companies affiliated with them when you access and use our website and associated offers. Potential risks may include unenforceable data subject rights and a lower level of data protection. We minimise the risk as far as possible by concluding order processing contracts (if such a contractual relationship exists) and by concluding standard contractual clauses including effective supplements required by the supervisory authorities. Data is transferred to the USA on the basis of the EU-US Data Framework.
2. use and disclosure of personal data
2a. General information
If you have provided us with personal data, we will use it to answer your enquiries, to advise and process contracts concluded with you and for technical administration. Your personal data will only be passed on or otherwise transmitted to third parties, except in the cases explicitly mentioned in this declaration, if this is necessary for the purpose of contract processing, for billing purposes or if you have given your prior consent. You have the right to withdraw your consent at any time with effect for the future, see also section 12 on your rights as a data subject.
2b. Contract processing
As part of contracts concluded with you in the context of orders in the online shop, we collect and store the personal data transmitted by you, such as name, address for the purpose of contract processing, e.g. also for invoicing.
The data is forwarded to banks, for example, as part of the billing process. The billing data is transferred to the tax office within the framework of the tax law requirements.
The legal basis for the collection, processing and transfer of data is Art. 6 para. 1 lit. b) GDPR in the context of contract processing. The legal basis for the transfer of data to the tax office is Art. 6 para. 1 lit. c) GDPR.
This data will be deleted after expiry of the applicable statutory retention obligations. If we are not subject to any statutory retention obligations, the data will be deleted when the purpose no longer applies.
You have the right to access and object to your data stored by us at any time, see below Section 12 on your rights as a data subject.
2c. Contact form and enquiry by email
When you use our contact form, we collect and store your email address for the purpose of responding to your enquiry. Providing your telephone number and name is optional.
If you send us an enquiry by email, we collect and store the email address and the data contained in the email in order to respond to your enquiry.
Legal basis: If a contractual relationship develops from the enquiry by way of contract initiation or if the enquiry relates to an existing contractual relationship, the legal basis is Art. 6 para. 1 lit. b) GDPR, as the storage of the data is necessary for the fulfilment of a pre-contractual or contractual obligation. Furthermore, we also have a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in the processing of data for the purpose of communicating and responding to your enquiries.
The data will be deleted when the purpose of storage no longer applies, i.e. after your email/contact form enquiry has been answered or when the matter relating to the enquiry has been finally clarified. In the case of an existing contractual relationship or a contractual relationship resulting from the enquiry, the data will be deleted after the statutory retention periods have expired.
For the right to erasure and information, see section 12 below on your rights as a data subject.
2d. Registration
When you register on our website or create a user account, we collect a user name and password from you. We also collect certain personal data as mandatory information. We require this information in order to be able to process your respective orders. The mandatory information is your name, your address, a telephone number where you can be reached during the day and your date of birth. The other details are provided voluntarily by you and failure to provide them has no effect whatsoever. We store the data permanently.
The legal basis for the collection and storage of data in the context of registration is Art. 6 para. 1 lit. a) and Art. 6 para. 1 lit. b) GDPR in the context of contract fulfilment.
The deletion takes place if you unsubscribe from our site or revoke your consent to the use of this data without affecting the legality of the processing carried out on the basis of the consent, unless statutory retention periods, e.g. for invoice documents, intervene. In these cases, blocking takes the place of erasure.
You have the right to information about your data stored by us at any time, see below. Section 12 below, including your other rights as a data subject.
3. cookies
The Internet pages use so-called cookies in several places. They serve to make our website more user-friendly, effective and secure. A cookie is text information that our website places on the end device you are using via the web browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. We also use cookies that recognise your browser when you log into your customer account and make it easier for you to access the stored content. We have also activated additional plugins with the help of Shopify to make the functionality of our shop more user-friendly. These are plugins such as Bevy Share Cart - Social Link, UpPromote Affiliate & Referral, Search & Discovery, Kaktus - PreOrder Now Presale. These plugins can also set cookies.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest arises from the fact that we only use the aforementioned cookies to make it easier for you to access the site, do not collect any tracking data and therefore do not interfere with your personal rights and fundamental freedoms.
You can exclude the acceptance of cookies in your web browser. However, this may lead to functional impairments. For your further rights as a data subject, see section 12 below.
These cookies are only valid for the duration of your browser session and are deleted at the end of your visit to our website.
We use cookies from the following third-party providers
Consent Tool CookieYes
To obtain your consent, we use the consent tool "CookieYes", a product of CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. If you give your consent, CookieYes will automatically log the following data with CookieYes:
The IP number of the end user in anonymised form
Date and time of consent
User agent of the end user's browser
The URL from which the consent was sent
An anonymous, randomised and encrypted key
The consent status of the end user, which serves as proof of consent
The stored data is used to ensure that web analysis services only collect data with your consent and to document this consent and to create and display cookie declarations for end users.
The key and consent status are also stored in the end user's browser in the cookie "cookieyes-consent" so that the website can automatically read and follow the end user's consent for all subsequent page requests and future end user sessions for up to 12 months. You can find out more in CookieYes' privacy policy at https://www.cookieyes.com/privacy-policy/.
The legal basis for the processing of your data is Art. 6 para. 1 lit. c) and f) GDPR, because we are legally obliged to be able to prove consent and our legitimate interest arises from the fact that we can only obtain the necessary consent in this way.
4. google analytics
Our website uses the Google Tag Manager. This solution is used to create and update tags, which we can then manage. The Tag Manager implements tags from the services we use and thus triggers other tags. The tool itself does not collect any personal data, but is only used for administration purposes. However, the tags that are triggered by it can independently collect personal data (see below). However, the Google Tag Manager does not access this collected data. If the tool is deactivated, the deactivation will apply to all tags implemented via the tool.
This website uses the web analytics service Google Analytics
Google Analytics uses so-called "cookies" for the purpose of analysing user behaviour on the website and measuring reach. An overview of how Google uses cookies and which cookies are used can be found in this overview.
The legal basis for the collection and storage of data is Art. 6 para. 1 sentence 1 lit. a) GDPR. By giving your consent to the use of Google Analytics, you consent to the processing of your data. Google Analytics automatically anonymises the IP addresses and only records the GEO localisation. It is therefore not possible for us to assign the collected analytics data to a specific person.
Google assures that the data is stored and processed by end devices in the EU on EU servers. However, an at least indirect transfer of this data to the USA cannot be ruled out. However, due to automatic IP anonymisation, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
The data transfer takes place on the basis of the EU-US Data Framework. We have concluded EU standard data protection clauses with Google, with which Google proves to us that it complies with appropriate and suitable technical and organisational measures to protect your personal data.
Revocation:
You can revoke your consent at any time by deleting all (consent) cookies set in your browser.
You can generally prevent the storage of cookies by selecting the appropriate settings in your browser software or in the cookie consent tool. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
You can find more information on data protection at Google Analytics at https://support.google.com/analytics/answer/6004245?hl=de.
The data stored by Google is deleted within 14 months as standard.
5 Google Ads
We use AdWords and Google Conversion Tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Ads places a cookie on your computer ("conversion cookie") if you access our website via a Google advert. These cookies lose their validity after 30 days and we do not collect any personal data that could be used to identify the user. However, your IP address will be transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA in the USA so that it can carry out the analyses described below for us. The data transfer takes place on the basis of the EU-US Data Framework. We have concluded an order processing agreement with Google, with which Google proves to us that it complies with appropriate and suitable technical and organisational measures to protect your personal data.
As long as the cookie is still active, we can recognise via Google Conversion Tracking when a user visits our site that this user clicked on the AdWords ad and was originally redirected to our site in this way. Each AdWords customer receives a different cookie. The information obtained with the cookies is used solely to create conversion statistics for us as AdWords customers. This tells us the total number of users who have clicked on one of our adverts and have been redirected to one of our pages with a conversion tracking tag.
The legal basis for the use of the conversion tracking cookie is Art. 6 para. 1 lit. a) GDPR, § 25 para. 1 TTDSG if the corresponding consent has been given.
Revocation and deletion:
You can also revoke your consent at any time by deleting all (consent) cookies set in your browser.
You can prevent the collection of information by generally deactivating the automatic setting of cookies in your browser settings or by setting your browser so that only cookies from the domain "googleadservices.com" are blocked. We cannot rule out the possibility that this may restrict the usability of our website. You also have the option of deactivating the use of cookies and thus personalised ads in Google's Ads Preferences Manager.
You have the right to information and objection to your data stored by us at any time, see below Section 12 on your rights as a data subject.
6. Meta pixel
We use the advertising tools of the social network of Meta Platforms, Inc 1 Hacker Way, Menlo Park, California 94025 USA ("Facebook") for advertising measures on Facebook and Instagram. If you are logged into your Facebook or Instagram account, Facebook uses the information you provided during registration, your likes and your other user behaviour to determine information such as your interests, on the basis of which you are shown user-defined advertisements, including from our company. We can also use the information categories specified by Meta to make presettings as to which user groups, which are anonymous to us, should see our adverts. Depending on the privacy settings you have defined, your name may appear in our adverts. You can find more information on name display in meta ads here. The same applies to so-called social ads, which show your friends that you have "liked" our page, for example. You can determine whether and how your name is displayed in the privacy settings and there in the advertising settings. You can also generally object to the display of Facebook adverts by opting out. In addition, you can click on "x" or "∨" in your timeline to set whether and how our adverts on Facebook or Instagram will be displayed to you in future. Meta will not pass on any of your personal data to us unless you have given us permission to do so. We can only use Meta's general analysis tools to track how many users, divided according to general criteria not linked to personal data, have seen our advert, clicked on it or subsequently made a purchase in our online shop or taken an action on our website (conversion tracking through the so-called visitor action pixel). Please note that there is a possibility that Facebook will assign this data to your account profile, over which we have no control.
Your behavioural data, as well as the data evaluated via the visitor action pixel, is transmitted to the servers of Meta Platforms Inc. in the USA. The data transfer takes place on the basis of the adequacy decision (EU-US Data Framework) between the EU and the USA. In addition, we have concluded EU standard data protection clauses with Meta, with which Facebook proves to us that it complies with appropriate and suitable technical and organisational measures to protect your personal data.
For more information on how Meta processes personal data, including the legal basis on which Meta relies and how data subjects can exercise their rights vis-à-vis Meta, please refer to Meta's Data Policy at https://www.facebook.com/about/privacy.
The legal basis for the collection and storage of data is Art. 6 para. 1 lit. a) GDPR, § 25 para. 1 TTDSG, if consent has been given.
Objection
If you do not or no longer agree to this, you should make use of the opt-out option mentioned above, with which you can prevent the display of adverts on Meta. You can find further information on Facebook's privacy policy and how Facebook adverts work.
8 Social networks
8a. Facebook page
We operate a Facebook fan page for the purpose of exchanging information with our customers, advertising new services and providing general information about our company and its employees. Customers and interested parties can join this by clicking the "Like" button and thus receive regular information from our company in their news feed on Facebook. We would like to point out that you use this Facebook fan page and its functions on your own responsibility.
This applies in particular to the use of interactive functions such as commenting, sharing, liking (see under "Things done and provided by you and others" in the Facebook data policy: https://www.facebook.com/policy), as well as information about the devices used by users (e.g. IP addresses, operating system, browser type, language settings, cookie data; see under "Device information" in the Facebook data policy statement: https://www.facebook.com/policy)
To operate our Facebook fan page, we use the technical platform and services of Meta Platforms, Inc 1 Hacker Way, Menlo Park, California 94025 USA.
As explained in the Facebook data policy under "How do we use this information?", Facebook also collects and uses information to provide analytics services, known as "Page Insights", for page operators so that they can gain insights into how people interact with their pages and with the content associated with them. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook fan page.
We have concluded a special agreement with Facebook ("Information on Page Insights", https://www.facebook.com/legal/terms/page_controller_addendum), which regulates in particular which security measures Facebook must observe and in which Facebook has agreed to fulfil the rights of data subjects (i.e. users can, for example, send information or deletion requests directly to Facebook). The rights of users (in particular to information, deletion, objection and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the "Information on Page Insights" (https://www.facebook.com/legal/terms/information_about_page_insights_data).
The data collected about you in this context is processed by Meta Platforms, Inc. and may be transferred to countries outside the European Union. What information Facebook receives and how it is used is described in general terms in Facebook's data policy. There you will also find information on how to contact Facebook and on the settings options for adverts. The data policy is available at the following link: https://www.facebook.com/privacy/explanation
Facebook does not conclusively and clearly state how Facebook uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook fan page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook fan page is passed on to third parties, and we are not aware of this.
Meta Platforms, Inc. is able to track that you have visited our fan page and how you have used it based on the cookies it uses and the information it collects. This also applies to all other Facebook pages as well as to the use of social share buttons if these are integrated on our website.
This data can be used to offer you customised content or advertising.
If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. In this way, Facebook information that can be used to directly identify you will be deleted.
This allows you to use our Facebook fan page without revealing your Facebook ID, but your IP address will also be recorded here and cookies will be set again. You can exclude the acceptance of cookies in your web browser. However, this may lead to functional impairments.
If you access interactive functions on the site (like, comment, share, messages, etc.), a Facebook login screen will appear. Once you have logged in, you will once again be recognisable to Facebook as a specific user.
You can find information on how to manage or delete existing information about you in Facebook's data policy.
We are jointly responsible with Meta Platforms, Inc for the collection or receipt in the context of a transmission (but not the further processing) of "event data" that Facebook collects by means of the Facebook social plugins that are executed on our online offer or receives in the context of a transmission for the following purposes:
- Advertising information that corresponds to the presumed interests of users as well as the display of content;
- Delivery of commercial and transactional information;
- Improving ad delivery and personalisation of features and content.
We have concluded a special agreement with Facebook ("Addendum for Responsible Parties", https://www.facebook.com/legal/controller_addendum), which regulates in particular which security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook agrees to fulfil the rights of data subjects.
Note: If Facebook provides us with measured values, analyses and reports that do not contain any information about individual users and are anonymous to us, then this processing is not carried out within the framework of joint responsibility, but on the basis of an order processing contract ("Data Processing Conditions", https://www.facebook.com/legal/terms/dataprocessing) the "Data Security Terms" (https://www.facebook.com/legal/terms/data_security_terms) and, with regard to processing in the USA, on the basis of standard contractual clauses ("Facebook-EU Data Transfer Addendum, https://www.facebook.com/legal/EU_data_transfer_addendum).
Further information on Facebook and other social networks and how you can protect your data in the context of private settings can be found, for example, at youngdata.de.
The legal basis for the use of the Facebook fan page is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is based on the fact that we enable customers to communicate directly with our company via this social media service, including for complaints, and thus constantly optimise our service.
The rights of users are not restricted by the agreements with Facebook.
For your rights as a data subject, see section 12 below.
8b. Linkedin
We operate a fan page on www.linkedin.com of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn") for the purpose of exchanging information with our customers and interested parties as well as for general information about our company and its employees. If you access the page via our website using the LinkedIn icon and are logged into your account at the same time, LinkedIn can directly associate your visit to our website with your LinkedIn account. If you do not want LinkedIn to associate your data with your account, you must log out of LinkedIn before visiting our website.
If you access interactive functions on the site (liking, commenting, sharing, messages, etc.), a LinkedIn login screen will appear. After logging in, you will once again be recognisable to LinkedIn as a specific user.
Further information can be found in LinkedIn's privacy policy at https://de.linkedin.com/legal/privacy-policy. You can check the privacy settings in your LinkedIn account. You can activate the "Block third-party cookies" function in your browser settings. However, blocking cookies may result in limited functionality of the site.
As the operator of our LinkedIn fan page, we do not collect or process any other data. You can find more information about LinkedIn and other social networks and how you can protect your data in your privacy settings at youngdata.de, for example.
The legal basis for the use of the LinkedIn fan page is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest is based on the fact that we enable customers to communicate directly with our company via this social media service, including for complaints, and thus constantly optimise our service.
For your rights as a data subject, see section 12 below.
8c. Instagram page
We operate a fan page on the "Instagram" platform for the purpose of communicating with our customers, advertising new services and providing general information about our company and its employees. This service is offered on the technical platform and by means of the services of Meta Platforms, Inc 1 Hacker Way, Menlo Park, California 94025 USA (hereinafter "Instagram").
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, is responsible for the data processing of persons living outside the United States.
If you access the page on our website via the Instagram icon and are logged into your Instagram account at the same time, Instagram can directly associate your visit to our website with your Instagram account.
If you do not want Instagram to associate your data with your account, you must log out of Instagram before visiting our website.
If you access interactive functions on the site (liking, commenting, sharing, messages, etc.), an Instagram login screen will appear. After logging in, you will once again be recognisable to Instagram as a specific user. For information on how you can manage or delete existing information about you, please refer to Instagram's data policy at https://help.instagram.com/519522125107875/?maybe_redirect_pol=0.
As the operator of our Instagram fan page, we do not collect or process any other data. You can find more information about Instagram and other social networks and how you can protect your data in the context of private settings, for example, at youngdata.de.
The legal basis for the use of the Instagram fan page is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is based on the fact that we enable customers to communicate directly with our company via this social media service, including for complaints, and thus constantly optimise our service.
For your rights as a data subject, see section 12 below.
8d. TikTok account
For the purpose of exchanging information with our customers and for general information about our company, we operate an account on www.tiktok.com and the TikTok app, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). If you access the page on our website via the TikTok symbol and are logged into your account at the same time, TikTok can directly assign the visit to our website to your TikTok account. If you do not want TikTok to associate your data with your account, you must log out of TikTok before visiting our website. If you access interactive functions on the site (liking, commenting, sharing, messages, etc.), a TikTok login screen will appear. After logging in, you will once again be recognisable to TikTok as a specific user.
Further information can be found in TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE. You can check the data protection settings in your TikTok account. You can activate the "Block third-party cookies" function in your browser settings. However, blocking cookies can lead to limited functionality of the site.
The legal basis for the use of the Instagram fan page is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is based on the fact that we enable customers to communicate directly with our company via this social media service, including for complaints, and thus constantly optimise our service.
For your rights as a data subject, see section 12 below.
9 YouTube
On this page, videos from third-party providers are integrated as content via the video portal "YouTube" of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By clicking on a video and the associated use of YouTube, your data may be processed by "YouTube". If you are logged into your Google/YouTube account at the same time as accessing the video, Google can track which subpage of our website the video is accessed from. If you would like to prevent this data collection, please log out of YouTube before visiting our site or watching the video. Details can be found in the terms of use of "YouTube" and the data protection guidelines of "Google".
The legal basis for the embedding of YouTube videos is Art. 6 para. 1 lit. a) GDPR, § 25 para. 1 TTDSG, if you have given your consent.
You have the right to information and objection to your data stored by us at any time, see below Section 12 on your rights as a data subject.
10 WhatsApp button
We have integrated the WhatsApp button on our website for direct contact. The messenger service is offered by WhatsApp Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This applies in any case if the user is located in the European Union. The responsible provider is Meta Platforms, Inc 1 Hacker Way, Menlo Park, California 94025 USA. If you open our website via a PC browser, you can use the chat with the "WhatsApp Web" extension. If you visit the site via a mobile device (such as a smartphone or tablet), you will be forwarded directly to WhatsApp Messenger. This allows you to send us a message immediately. The data is synchronised with a WhatsApp server.
Therefore, it cannot be ruled out that personal data will be transferred to the USA when using WhatsApp. The data transfer takes place on the basis of the EU-US Data Framework. Further information on data protection at WhatsApp can be found here: https://www.whatsapp.com/legal/
The legal basis for the use of WhatsApp, the data processing that takes place and the transfer of data to the USA is based on consent (Art. 6 para. 1 a) and Art. 49 para. 1 a) GDPR). We store the resulting chat for the duration of the collaboration. If you do not commission us, your personal data will be deleted as soon as the purpose no longer applies.
11. payment service provider
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provide during the order process together with information about your order (name, address, account number, sort code, credit card number if applicable, invoice amount, currency and transaction number). Further details can be found at https://www.shopify.com/de/legal/datenschutz.
The legal basis for the transfer of your data to Shopify is Art. 6 para. 1 lit. a) and Art. 6 para. 1 lit. b) GDPR, as on the one hand you consent to the use of the data by Shopify and on the other hand it is necessary for the fulfilment of the contract when selecting the payment methods mentioned.
For your rights as a data subject, see below. Section 12 below.
12. rights of data subjects
a. Right to object
If we process your data to protect legitimate interests (Art. 6 para. 1 lit. f) GDPR), you can object to this processing for reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.
In the event of an objection to data processing for the purpose of direct advertising, processing for this purpose will no longer take place.
b. Right to information
You have the right to request confirmation from us as to whether we process personal data concerning you and, if so, a right to information about the personal data and related information in accordance with Art. 15 GDPR.
c. Right to rectification
You have the right to obtain from us without undue delay the rectification or completion of inaccurate or incomplete personal data concerning you in accordance with Art. 16 GDPR.
d. Right to erasure
You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase such data without undue delay if one of the grounds specified in Art. 17 GDPR applies.
e. Right to restriction of processing
You have the right to demand that we restrict the processing of personal data concerning you if one of the conditions set out in Art. 18 GDPR applies.
f. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to request that we transmit the data to another controller, where technically feasible.
