Privacy Policy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only as long as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Contact
Controller
Contact us if you wish. The controller for data processing is: Christian von der Gablentz, Puttball 44, 29485 Lemgow Germany, 05883989520, diestempelgmbh@t-online.de
Proactive customer contact by e-mail
If you proactively contact us by e-mail for business purposes, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves to process and answer your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves the purpose of contacting us.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
For the technical provision and management of the revocation function on our online presence, we use a software solution from the third-party provider within the scope of order processingShopify-Widerrufsbutton
Your collected personal data will be transmitted to the servers of the aforementioned third-party providers when using the revocation function.
We provide an upload function for image files on our website. This allows you to send us images via encrypted data transfer. By submitting your images, we may collect your personal data (depiction of identifiable persons) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The transmitted image serves as a template for the product and is used for this purpose (e.g. T-shirt printing). Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.
Any disclosure of your data may take place to service providers whom we use within the scope of order processing. No disclosure to other third parties takes place.
Theimage you send will only be used within the scope of service provision. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Customer Account Orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves to improve your shopping experience and simplify order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.
Shipping service providers Merchandise management
Disclosure of email address to shipping companies for information on shipping status
We disclose your email address to the shipping company as part of contract processing, provided you have expressly consented to this during the ordering process. The disclosure serves the purpose of informing you about the shipping status by email. Processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company, without affecting the legality of the processing carried out on the basis of the consent until revocation.
Use of an external merchandise management system
We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected during the order is transmitted to
DreamRobot GmbH, Eckendorfer Str. 2-4, 33609 Bielefeld
.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
Payment service providers
Use of PayPal Express
We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. For the integration of this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The processing of your personal data is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated data protection declaration at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
Cookies may be stored here, which enable the recognition of your browser. The data processing that takes place as a result is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the legal provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default when PayPal makes advance payments.
You have the right to object to this processing of your personal data based on Art. 6 Para. 1 lit. f GDPR at any time for reasons arising from your particular situation by notifying PayPal. The provision of data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. For the implementation of this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Local third-party providers can be, for example:
Invoice purchase via PayPal
When paying via invoice purchase, the data required for payment processing is first transmitted to PayPal. For the implementation of this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Ratepay may carry out a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies according to the procedure already described above. The data processing serves the purpose of a credit check for initiating a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default when Ratepay makes advance payments. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Shopify Payments
We use the payment service "Shopify Payments" from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Payment processing in this case is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing serves the purpose of being able to offer you payment via the Shopify Payments payment service. By selecting and using a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
Stripe reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the legal provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default when Stripe makes advance payments.
You have the right to object to this processing of your personal data based on Art. 6 Para. 1 lit. f GDPR at any time for reasons arising from your particular situation by notifying Stripe. The provision of data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing during payment processing via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is called up again.
We use the consent tool "Shopify Privacy & Compliance" from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to give consent for data processing via the website, particularly for setting cookies, and to exercise your right to withdraw previously given consent. The data processing serves the purpose of obtaining and documenting necessary consents for data processing and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.
Data processing is carried out to fulfill a legal obligation based on Art. 6 Para. 1 lit. c GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz.
Analysis AI Tools
Use of Shopify Statistics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of commissioned processing. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
Data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Among other things, the following device information is collected and processed: web browser information, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about visited web pages or products, the referrer URL (website from which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies, as well as web beacons, tags, and pixels (electronic files for collecting information about how you navigate the website), are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent until withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa, and information on the cookies used at https://www.shopify.com/de/legal/cookies.
Plugins and Other
Use of hCaptcha
We use the hCaptcha service from Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; “hCaptcha”) on our website as part of commissioned processing.
hCaptcha serves to protect our website from spam and abuse by automated access (bots). By implementing hCaptcha, we ensure that certain actions on our website are only performed by real people, which guarantees the security and integrity of our online services.
When using hCaptcha, the following data may be collected and processed: user's IP address, information about the end device used (e.g., browser and operating system), mouse movements and interactions on the website, time spent on the website, user's input behavior.
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). hCaptcha has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent until withdrawal.
Further information on data processing and data protection at hCaptcha can be found at https://www.hcaptcha.com/gdpr.
Use of Cloudflare
We use the Cloudflare CDN content delivery network from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This is a regional network of servers in various data centers, with which our web server connects and through which certain content of our website is delivered.
The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly.
Among other things, the following information may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The processing of your personal data is based on Art. 6 (1) lit. f GDPR from our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of uniform display of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used here. This involves processing and transmitting your IP address and information about the browser you are using to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent until withdrawal.
Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Storage duration
After complete contract execution, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
Subject to the legal requirements, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR, and to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object to these processing operations at any time with effect for the future for reasons arising from your particular situation.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only as long as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offering.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, an adequacy decision of the EU Commission exists. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offering.
Contact
Controller
Contact us if you wish. The controller for data processing is: Christian von der Gablentz, Puttball 44, 29485 Lemgow Germany, 05883989520, diestempelgmbh@t-online.de
Proactive customer contact by e-mail
If you proactively contact us by e-mail for business purposes, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves to process and answer your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves the purpose of contacting us.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the revocation button
If you have concluded a contract via our online presence, we provide you with a revocation function (revocation button) via which you can immediately submit your declaration of revocation.
When using the revocation function, we only collect your personal data (name, e-mail address, information to identify the contract or part of the contract that you wish to revoke, as well as the time (date and time) of sending the declaration of revocation) to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to revoke your contract and for the proper processing of your revocation.
If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Otherwise, the data processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR, to fulfill a legal obligation to provide you with a revocation function on our online presence.
We only use your e-mail address to process your declaration of revocation. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Disclosure to third-party providers (plugin usage)For the technical provision and management of the revocation function on our online presence, we use a software solution from the third-party provider within the scope of order processingShopify-Widerrufsbutton
Your collected personal data will be transmitted to the servers of the aforementioned third-party providers when using the revocation function.
The processing of your personal data serves the purpose of legally fulfilling the requirements for the design of the revocation function and is carried out on the basis of Art. 6 para. 1 lit. c GDPR. This data processing is also carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in being able to provide you with a user-friendly revocation option. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
Use of address validation from Google Maps API
We use address validation from Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland "Google") on our website.
The data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors, and supplementing missing data if necessary. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there and evaluated.
Among other things, the following information can be transmitted to Google and processed there: postal addresses (country, city, postal code, street, house number), e-mail address, telephone number.
Your data may also be transmitted to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in correct data for the fulfillment of our contractual obligations. You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.
The data is processed separately by the provider and not merged with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but at the latest after 30 days.
Further information on terms of use and data protection at Google can be found at: https://cloud.google.com/maps-platform/terms or at https://www.google.de/policies/privacy/.
Collection and processing when sending images via uploadWe use address validation from Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland "Google") on our website.
The data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors, and supplementing missing data if necessary. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there and evaluated.
Among other things, the following information can be transmitted to Google and processed there: postal addresses (country, city, postal code, street, house number), e-mail address, telephone number.
Your data may also be transmitted to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in correct data for the fulfillment of our contractual obligations. You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.
The data is processed separately by the provider and not merged with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but at the latest after 30 days.
Further information on terms of use and data protection at Google can be found at: https://cloud.google.com/maps-platform/terms or at https://www.google.de/policies/privacy/.
We provide an upload function for image files on our website. This allows you to send us images via encrypted data transfer. By submitting your images, we may collect your personal data (depiction of identifiable persons) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The transmitted image serves as a template for the product and is used for this purpose (e.g. T-shirt printing). Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.
Any disclosure of your data may take place to service providers whom we use within the scope of order processing. No disclosure to other third parties takes place.
Theimage you send will only be used within the scope of service provision. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Customer Account Orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves to improve your shopping experience and simplify order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.
Collection, processing and disclosure of personal data for orders
When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and for handling your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.
Your data is passed on, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe legal requirements. The scope of data transmission is limited to a minimum.
Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.Shipping service providers Merchandise management
Disclosure of email address to shipping companies for information on shipping status
We disclose your email address to the shipping company as part of contract processing, provided you have expressly consented to this during the ordering process. The disclosure serves the purpose of informing you about the shipping status by email. Processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company, without affecting the legality of the processing carried out on the basis of the consent until revocation.
Use of an external merchandise management system
We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected during the order is transmitted to
DreamRobot GmbH, Eckendorfer Str. 2-4, 33609 Bielefeld
.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
Payment service providers
Use of PayPal Express
We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. For the integration of this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The processing of your personal data is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated data protection declaration at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
Cookies may be stored here, which enable the recognition of your browser. The data processing that takes place as a result is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the legal provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default when PayPal makes advance payments.
You have the right to object to this processing of your personal data based on Art. 6 Para. 1 lit. f GDPR at any time for reasons arising from your particular situation by notifying PayPal. The provision of data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. For the implementation of this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Local third-party providers can be, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Invoice purchase via PayPal
When paying via invoice purchase, the data required for payment processing is first transmitted to PayPal. For the implementation of this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Ratepay may carry out a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies according to the procedure already described above. The data processing serves the purpose of a credit check for initiating a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default when Ratepay makes advance payments. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Shopify Payments
We use the payment service "Shopify Payments" from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Payment processing in this case is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing serves the purpose of being able to offer you payment via the Shopify Payments payment service. By selecting and using a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
Stripe reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the legal provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default when Stripe makes advance payments.
You have the right to object to this processing of your personal data based on Art. 6 Para. 1 lit. f GDPR at any time for reasons arising from your particular situation by notifying Stripe. The provision of data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing during payment processing via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is called up again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data contained therein. Already stored cookies can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.
You can find information on how to manage (including deactivate) cookies in the most important browsers under the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically necessary cookies
Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again even after a page change.
The use of cookies or comparable technologies is based on Section 25 Para. 2 TDDDG. The processing of your personal data is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
Using the Shopify Consent Tool (Shopify Privacy & Compliance)We use the consent tool "Shopify Privacy & Compliance" from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to give consent for data processing via the website, particularly for setting cookies, and to exercise your right to withdraw previously given consent. The data processing serves the purpose of obtaining and documenting necessary consents for data processing and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.
Data processing is carried out to fulfill a legal obligation based on Art. 6 Para. 1 lit. c GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz.
Analysis AI Tools
Use of Shopify Statistics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of commissioned processing. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
Data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Among other things, the following device information is collected and processed: web browser information, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about visited web pages or products, the referrer URL (website from which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies, as well as web beacons, tags, and pixels (electronic files for collecting information about how you navigate the website), are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent until withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa, and information on the cookies used at https://www.shopify.com/de/legal/cookies.
Use of the AI-powered chat system "ChatGPT"
On our website, we use the chat system "ChatGPT" from OpenAI Ireland Limited, located at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland ("OpenAI"). ChatGPT is an automated system based on artificial intelligence. The systems used are based on Large Language Models (LLMs) that have been trained using machine learning methods. The functionality at a glance:
• Text inputs are converted into numerical representations ("token vectors"),
• the model calculates the most probable next tokens based on probabilistic methods (transformer architecture, deep learning),
• the response is generated step by step from these probabilities.
This is therefore stochastic text generation, not "human thought." Content may be incorrect or incomplete. We do not perform real-time human control.
According to Art. 52 AI Act, we inform you that you are interacting with an AI system. The responses generated by ChatGPT may contain errors or be incomplete. Please critically review the content and do not rely exclusively on chatbot outputs for legally binding matters.
The system serves the purpose of automated communication and to simplify and speed up responses to customer inquiries, particularly regarding order status, product features, and shipment tracking. We ask you not to enter any personal, business, or confidential data into the chatbot. However, your inputs into OpenAI are not used to train OpenAI models.
In this process, your IP address, date and time of page view, click path, information about the browser and device you use, visited pages, referrer URL (website from which you accessed our website), location data, and your chat input and the responses generated by the chatbot are collected and processed. These are stored to be able to provide information on related inquiries or information requested by you at a later date. Your authentication is explicitly done only with an existing order number and matching postal code.
Cookies are used for this purpose. The cookies enable the recognition of the internet browser. Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). OpenAI is not certified under the TADPF. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent until withdrawal.
Further information on the collection and use of data by OpenAI, on your rights in this regard and options for protecting your privacy can be found in OpenAI's privacy policy at https://openai.com/policies/privacy-policy/
Use of "Shopify Network Intelligence"
We use the security and analysis function "Shopify Network Intelligence" from Shopify Inc., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, in our online shop. Shopify Network Intelligence is an automated system based on artificial intelligence. This system serves network security, fraud detection, and optimization of shop performance.
Shopify Network Intelligence monitors network access and user behavior to detect and avert fraudulent activities (e.g., credit card misuse, bot attacks) at an early stage. Data for technical stability and performance analysis is also used.
According to Art. 52 AI Act, we inform you that you are interacting with an AI system. The responses generated by Shopify Network Intelligence may contain errors or be incomplete. Please critically review the content and do not rely exclusively on chatbot outputs for legally binding matters.
Shopify Network Intelligence serves us to ensure IT security and fraud prevention, the availability of the online shop, analysis, and optimization of shop performance.
Cookies are used for this purpose. The cookies enable the recognition of the internet browser. Your data may be transferred to Canada. For Canada, an adequacy decision by the EU Commission exists, which covers data processing by companies subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). Shopify, headquartered in Canada, is subject to PIPEDA and is obliged to comply with the data protection principles under PIPEDA.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent until withdrawal.
Further information on data processing can be found in Shopify's privacy policy at https://www.shopify.com/de/legal/datenschutz
Plugins and Other
Use of hCaptcha
We use the hCaptcha service from Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; “hCaptcha”) on our website as part of commissioned processing.
hCaptcha serves to protect our website from spam and abuse by automated access (bots). By implementing hCaptcha, we ensure that certain actions on our website are only performed by real people, which guarantees the security and integrity of our online services.
When using hCaptcha, the following data may be collected and processed: user's IP address, information about the end device used (e.g., browser and operating system), mouse movements and interactions on the website, time spent on the website, user's input behavior.
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). hCaptcha has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent until withdrawal.
Further information on data processing and data protection at hCaptcha can be found at https://www.hcaptcha.com/gdpr.
Use of Cloudflare
We use the Cloudflare CDN content delivery network from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This is a regional network of servers in various data centers, with which our web server connects and through which certain content of our website is delivered.
The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly.
Among other things, the following information may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The processing of your personal data is based on Art. 6 (1) lit. f GDPR from our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of uniform display of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used here. This involves processing and transmitting your IP address and information about the browser you are using to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent until withdrawal.
Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Use of Google Translate
On our website, we use the translation service from
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) via an API integration.
Data processing serves the purpose of displaying the information provided on the website in other languages. To ensure that the translation is automatically displayed in your chosen national language, the browser you are using connects to Google's servers. Cookies may be used in this process. Among other things, the following information may be collected and processed: IP address, URL of the visited page, date and time.
Your data may be transferred to the USA. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
Your data may be transferred to the USA. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out on the basis of the consent until withdrawal.
Further information on the collection and use of your data by Google can be found at: https://www.google.com/policies/privacy/.
Data subject rights and storage periodStorage duration
After complete contract execution, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
Subject to the legal requirements, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR, and to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object to these processing operations at any time with effect for the future for reasons arising from your particular situation.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.