Privacy policy
This is a non-binding translation. The legally binding version is the German one.
Personal data (hereinafter referred to mainly as "data") is processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Art. 4 No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, where we either alone or jointly with others decide on the purposes and means of processing. We also inform you below about the third-party components used by us for optimisation purposes and to enhance the user experience, where this involves third parties processing data on their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as the data controller
II. Rights of users and data subjects
III. Information about data processing
I. Information about us as the data controller
The provider responsible for this website in the data-protection sense is:
LIVONDO GmbH
Kurt-Schumacher-Str. 22
53113 Bonn
Tel.: +49 (0)228 289 255 0
Email: hello@vujo.de
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether their data is being processed, to information about the data being processed, to further information about the data processing and to copies of the data (see also Art. 15 GDPR);
- to correction or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
- to immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, where further processing is necessary in accordance with Art. 17(3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them, and to transmit this data to other providers/data controllers (see also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority where they consider that data concerning them is being processed by the provider in violation of data-protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any rectification or erasure of data or restriction of processing carried out under Articles 16, 17(1), 18 GDPR. However, this obligation does not apply where such notification is impossible or involves a disproportionate effort. Notwithstanding this, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the future processing of data concerning them, where the data is processed by the provider under Art. 6(1)(f) GDPR. In particular, an objection to data processing for the purposes of direct marketing is permitted.
III. Information about data processing
Your data processed when using our website is deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data is not contrary to statutory retention obligations, and no other information is given below regarding individual processing operations.
Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your internet browser to us or to our web-hosting provider. With these so-called server log files, the type and version of your internet browser, the operating system, the website from which you switched to our website (referrer URL), the page(s) of our website that you visit, the date and time of the respective access, and the IP address of the internet connection from which our website is used are recorded.
The data collected in this way is stored temporarily, but not together with any other data of yours.
This storage takes place on the legal basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data is deleted at the latest after seven days, unless further retention is required for evidence purposes. Otherwise the data is wholly or partially exempted from deletion until the final clarification of an incident.
Cookies
a) Session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies which are placed and stored on your device by the internet browser you use. These cookies process certain individual information about you, such as your browser data, location data or your IP address.
This processing makes our website more user-friendly, more effective and more secure, as it enables, for example, the display of our website in different languages or the offering of a basket function.
The legal basis for this processing is Art. 6(1)(b) GDPR, where these cookies process data for the purpose of contract initiation or contract performance.
If the processing does not serve contract initiation or contract performance, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6(1)(f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-party cookies
Where applicable, our website also uses cookies from partner companies with whom we cooperate for the purposes of advertising, analysis or the functionality of our website.
For details, in particular about the purposes and the legal bases of the processing of such third-party cookies, please refer to the information below.
c) Removal options
You can prevent or restrict the installation of cookies by adjusting your internet browser. You can also delete already-stored cookies at any time. The steps and measures required for this depend on the specific internet browser you are using. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. With so-called Flash cookies, however, the processing cannot be prevented via the browser settings. Instead you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, however, this may mean that not all functions of our website can be used in full.
Contract processing
The data you transmit when using our goods or services is processed by us for the purpose of contract performance and is necessary to that extent. Without you providing your data, the conclusion and performance of the contract is not possible.
The legal basis for the processing is Art. 6(1)(b) GDPR.
We delete the data once the contract has been fully performed, but must observe the retention periods under tax and commercial law.
As part of the contract performance, we pass on your data to the transport company commissioned with the delivery or to the financial-services provider, where the transfer is necessary for the delivery of the goods or for payment.
The legal basis for the transfer of data is then Art. 6(1)(b) GDPR.
Customer account / registration
If you create a customer account with us via our website, we will collect and store the data you enter during registration (such as your name, address or email address) exclusively for pre-contractual services, for contract performance or for the purpose of customer relations (for example, to provide you with an overview of your previous orders with us or to be able to offer you the so-called wishlist function). At the same time, we then store the IP address and the date and time of your registration. Naturally, this data is not passed on to third parties.
During the further sign-up process, your consent to this processing is obtained and reference is made to this privacy policy. The data we collect is used exclusively for providing the customer account.
Where you consent to this processing, Art. 6(1)(a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or contract performance, the legal basis for this processing is also Art. 6(1)(b) GDPR.
You may revoke the consent given to us for the opening and maintenance of the customer account at any time with effect for the future, in accordance with Art. 7(3) GDPR. To do so, you only need to inform us of your revocation.
The data collected for this purpose is deleted as soon as the processing is no longer necessary. We must, however, observe the retention periods under tax and commercial law.
Newsletter
If you sign up for our free newsletter, the data requested for this, namely your email address and, optionally, your name and address, is transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website, as well as the date and time of your sign-up. During the further sign-up process, we will obtain your consent to receive the newsletter, describe the content specifically and refer to this privacy policy. The data collected is used exclusively for sending the newsletter, and is therefore not passed on to third parties.
The legal basis is Art. 6(1)(a) GDPR.
You may revoke your consent to receive the newsletter at any time with effect for the future, in accordance with Art. 7(3) GDPR. To do so, you only need to inform us of your revocation or click the unsubscribe link contained in every newsletter.
Contact requests / contact options
If you contact us via our contact form or by email, the data you provide is used to process your request. Providing the data is necessary in order to process and answer your request: without it we cannot, or only partially, answer your request.
The legal basis for this processing is Art. 6(1)(b) GDPR.
Your data is deleted once your request has been finally answered and there are no statutory retention obligations preventing deletion, for example in connection with any subsequent contract performance.
Prize draws
Through our website, we offer you the opportunity to take part in prize draws. If you take part in one of our prize draws, the data you enter for participation is processed without further consent, but of course exclusively for carrying out and processing the respective prize draw.
As part of the operation of the prize draw, we pass on your data to the transport company commissioned with the delivery or to a financial-services provider, where the transfer is necessary for the delivery or payment of your prize. If your data is published in the event of a win, you will be informed of this in the context of the consent declaration.
The legal basis for the transfer of data is then Art. 6(1)(b) GDPR.
You may revoke your consent to the processing of data for participation in our prize draws at any time with effect for the future, in accordance with Art. 7(3) GDPR. To do so, you only need to inform us of your revocation.
To promote our products and services and to communicate with prospective customers or customers, we operate a company presence on the Facebook platform.
On this social-media platform we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Facebook's data protection officer can be contacted via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have set out the joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting and following processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication and the sale and promotion of our products and services.
The legal basis may also be a user's consent under Art. 6(1)(a) GDPR towards the platform operator. Users may revoke this consent at any time for the future under Art. 7(3) GDPR by notifying the platform operator.
When our online presence is accessed on the Facebook platform, Facebook Ireland Ltd. as the operator of the platform in the EU processes user data (such as personal information, IP address etc.).
This user data serves the purpose of providing statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and for creating user profiles. Based on these profiles, Facebook Ireland Ltd. is able, for example, to display interest-based advertising to users inside and outside Facebook. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. can additionally link the data to the respective user account.
If a user contacts us via Facebook, the personal data they enter on this occasion is used to process the request. The user's data is deleted once the request has been finally answered and there are no statutory retention obligations preventing deletion, for example in the case of subsequent contract performance.
To process the data, Facebook Ireland Ltd. may also place cookies.
If the user does not agree to this processing, they can prevent the installation of cookies by adjusting their browser settings. Already-stored cookies can also be deleted at any time. The settings depend on the respective browser. With Flash cookies, the processing cannot be prevented via the browser settings, but only by adjusting the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions can be used in full.
For more information about the processing activities, how to prevent them, and how to delete the data processed by Facebook, please see Facebook's data policy:
https://www.facebook.com/privacy/explanation
It cannot be ruled out that the processing by Facebook Ireland Ltd. also takes place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
To promote our products and services and to communicate with prospective customers or customers, we operate a company presence on the Instagram platform.
On this social-media platform we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Instagram's data protection officer can be contacted via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have set out the joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting and following processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication and the sale and promotion of our products and services.
The legal basis may also be a user's consent under Art. 6(1)(a) GDPR towards the platform operator. Users may revoke this consent at any time for the future under Art. 7(3) GDPR by notifying the platform operator.
When our online presence is accessed on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU processes user data (such as personal information, IP address etc.).
This user data serves the purpose of providing statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and for creating user profiles. Based on these profiles, Facebook Ireland Ltd. is able, for example, to display interest-based advertising to users inside and outside Instagram. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. can additionally link the data to the respective user account.
If a user contacts us via Instagram, the personal data they enter on this occasion is used to process the request. The user's data is deleted once the request has been finally answered and there are no statutory retention obligations preventing deletion, for example in the case of subsequent contract performance.
To process the data, Facebook Ireland Ltd. may also place cookies.
If the user does not agree to this processing, they can prevent the installation of cookies by adjusting their browser settings. Already-stored cookies can also be deleted at any time. The settings depend on the respective browser. With Flash cookies, the processing cannot be prevented via the browser settings, but only by adjusting the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions can be used in full.
For more information about the processing activities, how to prevent them, and how to delete the data processed by Instagram, please see Instagram's data policy:
https://help.instagram.com/519522125107875
It cannot be ruled out that the processing by Facebook Ireland Ltd. also takes place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
Linking to social media via image or text link
On our website we also promote presences on the social networks listed below. The integration is done via a linked image of the respective network. By using this linked image, an automatic connection to the respective server of the social network when accessing a website with social-media promotion is prevented, since otherwise an image of the respective network itself would be displayed. Only by clicking on the relevant image is the user redirected to the service of the respective social network.
After the user is redirected, the respective network collects information about the user. It cannot be ruled out that the data collected in this way is processed in the USA.
This is initially data such as IP address, date, time and the page visited. If the user is logged into their account on the respective network during this, the network operator may be able to link the information collected from the specific visit to the user's personal account. If the user interacts via a "Share" button of the respective network, this information may be stored in the user's personal account and possibly published. If the user wishes to prevent the collected information from being directly assigned to their account, they must log out before clicking on the image. Additionally, the user can configure the respective account accordingly.
The following social networks are embedded in our site by linking:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy policy: https://www.facebook.com/policy.php
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy policy: https://help.instagram.com/519522125107875
"Facebook" social plug-in
On our website we use the plug-in of the Facebook social network. Facebook is an internet service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU this service is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, both hereinafter referred to as "Facebook".
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the quality improvement of our website.
Further information about the possible plug-ins and their functions is provided by Facebook at
https://developers.facebook.com/docs/plugins/
for you.
Where the plug-in is embedded on one of the pages of our website that you visit, your internet browser downloads a representation of the plug-in from Facebook's servers in the USA. For technical reasons it is necessary that Facebook processes your IP address. In addition, the date and time of the visit to our pages is recorded.
If you are logged into Facebook while visiting one of our pages with the plug-in, the information collected by the plug-in about your specific visit is recognised by Facebook. Facebook may then assign this information to your personal user account there. So if, for example, you use the so-called "Like" button on Facebook, this information is stored in your Facebook user account and may be published via the Facebook platform. If you wish to prevent this, you must either log out of Facebook before visiting our website, or use a browser add-on to prevent the Facebook plug-in from loading.
Further information about the collection and use of data and your related rights and protection options is provided by Facebook in the privacy notices available at
https://www.facebook.com/policy.php
.
Google Analytics
On our website we use Google Analytics. This is a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
The Google Analytics service is used to analyse the user behaviour of our website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. With this function, Google shortens the IP address already within the EU or the EEA.
The data collected in this way is used by Google to provide us with an evaluation of the visit to our website and the usage activities there. The data may also be used to provide other services connected with the use of our website and the use of the internet.
Google states that it does not link your IP address with other data. Google also provides further data-protection information at
https://www.google.com/intl/de/policies/privacy/partners
, including options for preventing the use of the data.
Google also offers at
https://tools.google.com/dlpage/gaoptout?hl=de
a so-called deactivation add-on along with further information. This add-on can be installed with common internet browsers and gives you further control over the data collected by Google when you access our website. The add-on tells the Google Analytics JavaScript (ga.js) that no information about your visit to our website should be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. Whether and which other web analytics services are used by us is also explained in this privacy policy.
Google Maps
On our website we use Google Maps to display our location and to create directions. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
If you call up the Google Maps component embedded on our website, Google stores a cookie on your device via your internet browser. To display our location and to create directions, your user settings and data are processed. We cannot rule out that Google uses servers in the USA in this process.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the optimisation of the functionality of our website.
Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions are to be transmitted.
If you do not agree to this processing, you have the option of preventing the installation of cookies through the appropriate settings in your internet browser. You will find details on this above under "Cookies".
The use of Google Maps and the information obtained via Google Maps is also subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the terms of use for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.
Google also provides at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information.
Google reCAPTCHA
On our website we use Google reCAPTCHA to check and prevent interactions on our website by automated access, for example by so-called bots. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
Through this service, Google can determine from which website a request is sent and from which IP address you use the so-called reCAPTCHA input box. In addition to your IP address, other information may be collected by Google that is necessary for offering and providing this service.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our website and in defending against unwanted automated access in the form of spam or similar.
Google offers at
https://policies.google.com/privacy
further information about the general handling of your user data.
Google Fonts
On our website we use Google Fonts to display external fonts. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.
Through the connection to Google established when our website is accessed, Google can determine from which website your request was sent and to which IP address the display of the font is to be transmitted.
Google offers at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information, in particular about the options for preventing the use of data.
Google search ("CSE")
For full-text search on the website we use the "Google Custom Search Engine" ("CSE"). "CSE" is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
"CSE" enables a full-text search of content on our website. Access to this search function is provided via a "Google Custom Search" search box.
The legal basis here is Art. 6(1)(f) GDPR. Our legitimate interest lies in the user-friendliness of the website.
The function is integrated unchanged on our website as a software module from Google.
When the search is activated by entering a search term, Google loads the requested information via a plug-in. At the same time, the terms entered by the user and the user's IP address are transmitted to Google to perform the search and display the search results.
If the user is logged into their existing Google account at the time of the search, Google can assign the collected information to the corresponding user profile.
Further information, in particular about the options for preventing the use of data, is provided by Google at the following links:
https://policies.google.com/privacy
https://adssettings.google.com/authenticated
Google AdWords with conversion tracking
On our website we use the Google AdWords advertising component, including so-called conversion tracking. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
We use conversion tracking for the targeted promotion of our offering. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
If you click on an ad served by Google, the conversion tracking we use stores a cookie on your device. These so-called conversion cookies expire after 30 days and do not serve to identify you personally.
If the cookie is still valid and you visit a particular page of our website, both we and Google can evaluate that you clicked on one of our ads placed with Google and that you were subsequently redirected to our website.
Google uses the information collected in this way to provide us with statistics about the visit to our website. Through this we also receive information about the number of users who clicked on our ad(s) and about the pages of our website subsequently accessed. Neither we nor third parties who also use Google AdWords are thereby able to identify you in this way.
You can also prevent or restrict the installation of cookies through the appropriate settings in your internet browser. At the same time, you can delete already-stored cookies at any time. The steps and measures required for this depend on the specific internet browser you are using. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support.
Google also provides at
https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
further information on this subject, in particular about the options for preventing the use of data.
Google AdSense
On our website we use Google AdSense to embed advertising. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
Through Google AdSense, cookies and so-called web beacons are stored on your device via your internet browser. This enables Google to analyse your use of our website. The information collected, in addition to your IP address and the advertising formats displayed to you, is transmitted to Google in the USA and stored there. Google may also pass this information on to contractual partners. Google states, however, that it does not combine your IP address with any other data of yours.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
If you do not agree to this processing, you have the option of preventing the installation of cookies through the appropriate settings in your internet browser. You will find details on this above under "Cookies".
Google also offers at
https://policies.google.com/privacy
https://adssettings.google.com/authenticated
further information, in particular about the options for preventing the use of data.
Google Remarketing or "Similar audiences" component of Google
On our website we use the remarketing or "Similar audiences" function. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
We use this function to deliver interest-based, personalised advertising on third-party websites that also participate in Google's advertising network.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
To enable this advertising service, Google stores a cookie with a sequence of numbers on your device via your internet browser during your visit to our website. This cookie records, in anonymised form, both your visit and the use of our website. However, no personal data is passed on. If you subsequently visit the website of a third party that also uses Google's advertising network, advertising messages may appear that relate to our website or to our offerings there.
To deactivate this function permanently, Google offers a browser plug-in for the most common internet browsers at
https://www.google.com/settings/ads/plugin
.
The use of cookies of certain providers can also be deactivated by opt-out, for example via
http://www.youronlinechoices.com/uk/your-ad-choices
or
http://www.networkadvertising.org/choices/
.
Through so-called cross-device marketing, Google may track your usage behaviour across multiple devices, so that you may be shown interest-based, personalised advertising even when you switch device. This requires, however, that you have consented to the linking of your browser histories with your existing Google account.
Google provides further information about Google Remarketing at
https://www.google.com/privacy/ads/
.
Shopify (shop software + web analytics)
a) Shopify shop software
For hosting our shop system, displaying our offerings and processing contracts, we use "Shopify".
The legal basis is Art. 6(1)(b) GDPR (contract initiation/contract performance).
"Shopify" is the service of a corporate group consisting of the companies Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., Shopify Commerce Singapore Pte. Ltd., and Shopify International Limited.
Where we are based in the European Economic Area (EEA), processing is carried out by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter referred to as "Shopify".
Due to the corporate group, however, it cannot be ruled out that processing also takes place in Canada and the USA, that is, outside the EEA. For data transfer to Shopify Inc. in Canada, an adequate level of data protection is guaranteed by the European Commission's adequacy decision.
Shopify processes the following data on our behalf:
Name, billing and, where applicable, delivery address, email address, payment data, where applicable company name, where applicable telephone number, IP address, information about orders, information about the merchant shops supported by Shopify that you visit, and information about your device and your internet browser.
Shopify also offers further data-protection information at
https://www.shopify.de/legal/datenschutz
.
b) Shopify web analytics
Where we also use Shopify's web analytics service on our website, Shopify stores cookies on your device via your internet browser. Through these cookies, further information, such as the location, time or frequency of your visit to our website, is transmitted to a Shopify server and analysed.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis and optimisation of our website.
If you do not agree to this processing, you have the option of preventing the storage of the cookie by adjusting your internet browser. You will find further information above under "Cookies".
Klarna "CHECK-OUT"
For payment processing of orders via our online shop, we use the payment service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter referred to as "Klarna", on our website.
For this purpose, we have integrated Klarna's so-called check-out into the final order page of our online shop.
The legal basis is contract performance under Art. 6(1)(b) GDPR. We also have a legitimate interest in offering effective and secure payment options, so that a further legal basis arises from Art. 6(1)(f) GDPR.
By embedding Klarna, your internet browser loads the check-out page from a Klarna server. This already transmits the operating system you use, the type and version of your internet browser, the website from which the check-out was requested, the date and time of access, and the IP address to Klarna, even without you interacting with the check-out page.
As soon as you complete the order in our online shop, the data you enter into the input fields of the check-out page is processed by Klarna under its own responsibility for the purpose of processing the payment.
For the offered payment methods "PayPal" and "Advance payment", processing is limited, without your further consent, to the transfer of payment data to us or PayPal.
For the offered payment methods "Purchase on invoice", "Instalment purchase", "Credit card", "Direct debit" or "Sofort transfer", the following personal data, in particular, is processed by Klarna for the purpose of payment processing and identity and credit-worthiness checks:
- Contact information, such as name, address, date of birth, gender, email address, telephone number, mobile number, IP address, etc.
- Information about the processing of the order, such as product type, product number, price, etc.
- Payment information, such as debit and credit card data (card number, expiry date and CCV code), invoice data, account number, etc.
If the payment method "Purchase on invoice" or "Instalment purchase" is selected, Klarna collects and uses personal data and information about your previous payment behaviour to decide whether to grant you the desired payment method. In addition, probability values for your future payment behaviour (so-called scoring) are used. The calculation of the scoring is carried out on the basis of scientifically recognised mathematical-statistical procedures.
Klarna provides at
https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf
further information about the processing described above and the applicable data-protection terms.