Privacy policy

Hier ist der vollständige Text auf Englisch. Bitte beachte: Das ist eine inhaltstreue Übersetzung deines deutschen Textes, keine rechtliche Prüfung, ob alle genannten Dienste bei deinem Shop tatsächlich verwendet werden.

1) Introduction and Contact Details of the Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means all data by which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ali Asghar Rezaie, Trying Counts, Lehrter Straße 68, 10557 Berlin, Germany, Tel.: 017632288595, Email: alipodgermany@gmail.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1

When you use our website for informational purposes only, i.e. when you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our website visited by you
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (where applicable: in anonymised form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or otherwise used. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

2.2

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

In the event of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called “session cookies”), while others remain on your device for a longer period and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and in a customer-friendly and effective design of the website visit.

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

When you contact us (e.g. via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations prevent this.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for opening an account can be found in the input form of the relevant form on our website.

It is possible to delete your customer account at any time by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods prevent this, and we have no legitimate interest in further storage.

7) Data Processing for Order Processing

7.1

To the extent necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing the order in order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of notifications concerning updates owed by us and are processed by us for this purpose only to the extent necessary for the respective information.

In order to process your order, we also work with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

7.2

In order to fulfil our contractual obligations towards our customers, we work with external shipping partners. We pass on your name, delivery address and, where necessary for delivery, your telephone number exclusively for the purpose of delivering goods to a shipping partner selected by us in accordance with Art. 6(1)(b) GDPR.

7.3 Printify

For order processing, we use the following provider: Printify Inc., 108 West 13th Street, Wilmington 19801, Delaware, USA.

Name, address and, where applicable, further personal data are passed on to the provider exclusively for the purpose of processing the online order in accordance with Art. 6(1)(b) GDPR. Your data is only passed on to the extent that this is actually necessary for processing the order.

For the transfer of data to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

7.4

Anthropic Claude

In order to provide our services, we use artificial intelligence software from the following provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland.

Information provided by you within the context of a contractual relationship may be entered into the provider’s software in order to organise, analyse, aggregate, modify, evaluate or prepare it for the provision of our services.

Information may also be transferred to: Anthropic PBC, USA.

The collection and further processing of this information is carried out strictly for the purpose of performing the contract. Processing for the purpose of training and further developing the provider’s AI language models is expressly prevented.

Where the subject matter of processing also includes personal data, processing is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of available resources and technologies in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of personal data processed by the provider and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

Google Gemini

In order to provide our services, we use artificial intelligence software from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Information provided by you within the context of a contractual relationship may be entered into the provider’s software in order to organise, analyse, aggregate, modify, evaluate or prepare it for the provision of our services.

Information may also be transferred to: Google LLC, USA.

The collection and further processing of this information is carried out strictly for the purpose of performing the contract. Processing for the purpose of training and further developing the provider’s AI language models is expressly prevented.

Where the subject matter of processing also includes personal data, processing is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of available resources and technologies in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of personal data processed by the provider and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further legal information and Google’s privacy policy can be found at:
https://support.google.com/gemini/answer/13594961?hl=de

OpenAI

In order to provide our services, we use artificial intelligence software from the following provider: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

Information provided by you within the context of a contractual relationship may be entered into the provider’s software in order to organise, analyse, aggregate, modify, evaluate or prepare it for the provision of our services.

Information may also be transferred to: OpenAI OpCo, LLC, USA.

The collection and further processing of this information is carried out strictly for the purpose of performing the contract. Processing for the purpose of training and further developing the provider’s AI language models is expressly prevented.

Where the subject matter of processing also includes personal data, processing is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of available resources and technologies in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of personal data processed by the provider and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

7.5 Use of Payment Service Providers

Apple Pay

If you choose the “Apple Pay” payment method of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the “Apple Pay” function of your device operating with iOS, watchOS or macOS by charging a payment card stored with “Apple Pay”. Apple Pay uses security functions integrated into the hardware and software of your device to protect your transactions. In order to authorise a payment, it is therefore necessary to enter a code previously set by you and to verify using the “Face ID” or “Touch ID” function of your device.

For the purpose of payment processing, the information provided by you during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for the purpose of carrying out the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm successful payment.

Where personal data is processed in the context of the transfers described, processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, the approximate date and approximate time, and whether the transaction was successfully completed. Anonymisation completely excludes any personal reference. Apple uses anonymised data to improve “Apple Pay” and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and the authorisation device communicate via an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in the settings on your iPhone. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.

Further information on data protection at Apple Pay can be found at:
https://support.apple.com/de-de/HT203027

Google Pay

If you choose the “Google Pay” payment method of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment processing is carried out via the “Google Pay” application on your mobile device running at least Android 4.4 (“KitKat”) and equipped with an NFC function, by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To authorise a Google Pay payment exceeding EUR 25.00, your mobile device must first be unlocked using the respective verification method set up (such as facial recognition, password, fingerprint or pattern).

For the purpose of payment processing, the information provided by you during the ordering process, together with information about your order, is transmitted to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a uniquely assigned transaction number, which is used to verify a completed payment. This transaction number contains no information about the actual payment data of your payment methods stored with Google Pay, but is created and transmitted as a uniquely valid numerical token. For all transactions via Google Pay, Google acts solely as an intermediary for the processing of the payment transaction. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored with Google Pay.

Where personal data is processed in the context of the transfers described, processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for every transaction made through Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos that you attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6(1)(f) GDPR on the basis of its legitimate interest in proper accounting, verification of transaction data and the optimisation and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with further information collected and stored by Google when using other Google services.

The Google Pay Terms of Service can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection at Google Pay can be found at the following internet address:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method offered by the provider for which you make advance payment, the payment data provided by you during the ordering process (including name, address, bank account and card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we make advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, data relating to an alternative means of payment).

In order to safeguard our legitimate interest in determining your ability to pay in such cases, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. On the basis of the personal data you provide and other data (such as shopping cart, invoice amount, order history and payment experience), the provider checks whether the payment option you have selected can be granted in view of payment and/or default risks.

The credit report may contain probability values (so-called “score values”). Where score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of score values.

You may object to the processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data where this is necessary for contractual payment processing.

8) Retargeting/Remarketing and Conversion Tracking

Meta Pixel with Advanced Matching

Within our online offering, we use the “Meta Pixel” service of the following provider in Advanced Matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).

If a user clicks on an advertisement placed by us on Facebook or Instagram, the URL of our linked page is extended by a parameter using “Meta Pixel”. After redirection, this URL parameter is then stored in the user’s browser by means of a cookie that is set by our linked page itself. In addition, this cookie records specific customer data, such as the email address that we collect on our website linked to the Facebook or Instagram advertisement during processes such as purchases, account logins or registrations (Advanced Matching). The cookie is then read and enables the transmission of data, including specific customer data, to Meta.

We use “Meta Pixel” with Advanced Matching to make our advertisements (so-called “Ads”) on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of users or exhibit certain characteristics (e.g. interest in certain topics or products determined on the basis of websites visited), which we transmit to Meta (so-called “Custom Audiences”).

In addition, we analyse the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared with the standard version of “Meta Pixel”, the Advanced Matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All data transmitted is stored and processed by Meta so that it can be assigned to the respective user profile and Meta can use the data for its own advertising purposes in accordance with Meta’s Data Policy: https://www.facebook.com/about/privacy/. The data may enable Meta and its partners to place advertisements on and outside Facebook.

All processing described above, in particular the setting of cookies to read information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is generally transferred to and stored on a Meta server; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

9) Website Functionalities

Shopsync for Shopify

This website uses the Shopify app “Shopsync” of ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.

With the help of ShopSync, the newsletter service “Mailchimp” is synchronised with our Shopify account in such a way that, on the one hand, updates in Mailchimp email lists (such as an unsubscribe by a newsletter recipient) are automatically also stored in Shopify and, on the other hand, new contact data generated through contracts concluded on Shopify is automatically transferred to Mailchimp email lists.

In the first case, data processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the effective, cross-system maintenance of advertising addressee records and the efficient observance of legally significant status changes.

In the second case, only on the basis of the user’s express consent pursuant to Art. 6(1)(a) GDPR, after a contract has been concluded on Shopify, the user’s first and last name, address and email address, together with transaction-related information (purchase amount, time and date of purchase), are transferred by ShopSync to Mailchimp for inclusion in the Mailchimp list.

Data transferred in this way is not stored or retained by ShopSync after synchronisation. All information synchronised between Shopify and Mailchimp is transmitted using SSL technology (Secure Socket Layer), and all transmitted information remains encrypted during the synchronisation process.

The synchronisation process requires the transfer of information over a secure connection to servers hosted by Amazon Web Services in the USA.

Further data protection information on ShopSync can be found here:

https://www.shop-sync.com/privacy-policy

10) Rights of the Data Subject

10.1

Applicable data protection law grants you the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), with reference being made to the legal basis stated for the respective requirements for exercising these rights:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to be informed pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent given pursuant to Art. 7(3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 Right to Object

WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and, where applicable, additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

If statutory retention periods exist for data processed within the scope of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or that we have no legitimate interest in further storage.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.