📦 Shipping | 🇩🇪 GER 2.5€ | 🇪🇺 EU 3.5€
0

Privacy policy

1. Introduction and Overview
Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below, we provide you with detailed information on how we handle your data. This Privacy Policy explains the nature, scope, and purpose of the processing of personal data within our online shop.

2. Name and Contact Details of the Controller
The Controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Nick Lysenko
c/o flexdienst – #20253
Kurt-Schumacher-Straße 76
67663 Kaiserslautern
Germany

E-Mail: [email protected]

3. Hosting via Big Cartel
Our online shop is hosted on the servers of Big Cartel (Big Cartel, LLC, 283 W. 200 S., Suite 200, Salt Lake City, UT 84101, USA).
When you visit our website, technical data (e.g., IP address, date and time of the request, browser type, operating system) is transmitted to Big Cartel's servers and stored in so-called server log files. This processing is carried out to safeguard our legitimate interest in the error-free presentation and security of our website (Art. 6(1)(f) GDPR).
Since Big Cartel is based in the USA, data is transferred to a third country. We have concluded a Data Processing Agreement (DPA) including EU Standard Contractual Clauses (SCCs) with Big Cartel to ensure an adequate level of data protection.

4. Data Collection for Contract Conclusion and Order Processing
We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g., via email). Mandatory fields are marked as such because, in these cases, we absolutely need the data to process the contract.
The data collected can be seen from the respective input forms (usually name, delivery address, billing address, email address). We use the data you provide to process contracts and handle your inquiries in accordance with Art. 6(1)(b) GDPR.
After complete processing of the contract, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods, unless you have expressly consented to further use of your data.

5. Payment Processing
To process payments, we pass on your payment data to the commissioned credit institution or the selected payment service provider, insofar as this is necessary for payment processing. The legal basis for the transfer of the data is Art. 6(1)(b) GDPR (performance of a contract). Depending on the payment method you select during the ordering process, we pass on the data collected to process the payment to the following service providers:

PayPal: If you pay via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The transfer takes place in accordance with Art. 6(1)(b) GDPR and only insofar as it is necessary for payment processing. Further information on data protection at PayPal can be found at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

Stripe (Credit Card Payments): If you opt for credit card payment, the processing is carried out by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We pass on the information provided during the ordering process along with information about your order in accordance with Art. 6(1)(b) GDPR to Stripe. Further information on data protection at Stripe can be found at: https://stripe.com/privacy

Apple Pay: If you choose "Apple Pay", payment processing is carried out by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. After authentication, Apple carries out the payment using the payment card stored in the Wallet app. Apple also processes anonymized transaction data. Further information on data protection at Apple Pay can be found at: https://support.apple.com/en-us/HT203027

Google Pay: If you choose "Google Pay", payment processing is carried out by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes and transmits your data to the stored credit institution as part of the transaction. Further information on data protection at Google Pay can be found at: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice

Amazon Pay: If you choose "Amazon Pay", payment processing is carried out by Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, L-1855 Luxembourg. We pass on your order data to Amazon in accordance with Art. 6(1)(b) GDPR. Amazon uses the payment and address data stored in your Amazon customer account. Further information on data protection at Amazon Pay can be found at: https://pay.amazon.co.uk/help/201212490

Klarna: If you opt for a Klarna payment service (e.g., purchase on account), payment processing is carried out by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. To process the payment, we pass on your personal data and order details to Klarna. Note on credit checks: For risk assessment purposes (especially for purchases on account), Klarna carries out identity and credit checks. For this purpose, your data may be transmitted to credit reference agencies based on Klarna's legitimate interest (Art. 6(1)(f) GDPR). Detailed information on this can be found in Klarna's privacy policy: https://www.klarna.com/international/privacy-policy/

6. Cookies and Technically Necessary Data
Our shop uses cookies. These are small text files stored on your device. We completely refrain from using analytics and tracking cookies. Only technically necessary cookies are used (e.g., to ensure the shopping cart functions across multiple page views).
The use of these strictly necessary cookies is based on the legal requirements for technical necessity. The associated processing of personal data is based on our legitimate interest in the smooth functionality of our shop pursuant to Art. 6(1)(f) GDPR.

7. Your Rights as a Data Subject
Under applicable legal provisions, you have the following rights at any time:

  • Right of Access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us.
  • Right to Rectification (Art. 16 GDPR): You can demand the immediate correction of incorrect data or the completion of your personal data stored by us.
  • Right to Erasure (Art. 17 GDPR): You can request the deletion of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
  • Right to Restriction of Processing (Art. 18 GDPR).
  • Right to Data Portability (Art. 20 GDPR).
  • Right to Withdraw Consent (Art. 7(3) GDPR).
  • Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR).

Right to Object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds relating to your particular situation. If you wish to exercise your right of withdrawal or objection, an email to [email protected] is sufficient.