Privacy Policy
|
PRIVACY POLICY Laia Gasteiz
|
1 INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.
1.2 The controller responsible for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is Laia Gasteiz. The controller is the natural or legal person who alone or jointly determines the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in the browser bar.
2 DATA COLLECTION WHEN VISITING OUR WEBSITE
When we use our website for information purposes only —i.e., if you do not register or otherwise provide us with information—we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary to display the website to you: The website visited Date and time of access Amount of data sent in bytes Source/reference from which you came to the page Browser used Operating system used IP address used (if applicable: anonymized) The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be transmitted or otherwise used. However, we reserve the right to retrospectively review the server log files if there are concrete indications of illegal use.
3 COOKIES
To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data, as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR, either for contract fulfillment or in accordance with Art. 6(1)(f) GDPR, to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit. of the website, as well as in a user-friendly and effective page visit design for the customer. We can collaborate with advertising partners who can help us to make our website more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). Note: You can configure your browser to inform you about cookie settings and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in how it manages cookie settings. Please note that the functionality of our website may be limited if cookies are not accepted. Browser cookie settings Internet Explorer: support.microsoft.com/help/17442 Firefox : support.mozilla.org/kb/cookies-erlauben-und-ablehnen Chrome : support.google.com/chrome/answer/95647 Safari : support.apple.com/kb/ph21411 Opera : help.opera.com/en/latest/web-preferences/#cookies
4 CONTACT
When contacting us (e.g., via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request or for contacting you and the corresponding technical administration. The legal basis for the data processing is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted after the final processing of your request unless there are no legal retention obligations to the contrary.
5 DATA PROCESSING UPON OPENING A CUSTOMER ACCOUNT AND CONTRACT PROCESSING
According to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed when you provide them to us for contract fulfillment or when opening a customer account. What data is collected can be seen from the respective input forms. The deletion of your customer account is possible at any time and can be done by sending a message to the controller's address above. We store and use the data you provide for contract processing. After complete contract processing or deletion of your customer account, your data will be blocked in relation to tax and commercial law retention periods and deleted after the expiration of these periods, unless you have expressly consented to further use of your data.
6 USE OF YOUR DATA FOR DIRECT ADVERTISING
6.1 — Email newsletter registration If you register for our email newsletter, we will regularly send you information about our offers. The only information that is mandatory for sending the newsletter is your email address. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you a newsletter by email once you have expressly confirmed that you consent to receive them. By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address entered by the Internet service provider (ISP), as well as the date and time of registration. You can unsubscribe from the newsletter at any time via the link provided in the newsletter. After unsubscribing, your email address will be immediately deleted from our newsletter mailing list.
6.2 — Email newsletter to existing customers If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar products or services from our range by email. We do not need to obtain your separate consent for this. Data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6(1)(f) GDPR. You have the right to object to the use of your email address for advertising purposes at any time with future effect.
7 DATA PROCESSING FOR THE FULFILMENT OF ORDERS
7.1 The personal data we collect will be transmitted to the shipping company commissioned with delivery as part of contract processing to the extent that this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution as part of payment processing to the extent that this is necessary for payment processing. The legal basis for data transfer is Art. 6(1)(b) GDPR.
7.2 — PayPal payment service providers: When paying via PayPal, credit card via PayPal, direct debit via PayPal or — if offered — "purchase on account" or "installment payment" via PayPal, we transmit your payment data to PayPal (Europe) S.à.r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg. The transfer is made in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing. PayPal reserves the right to perform a credit check. You can object to this processing at any time by sending a message to PayPal. SOFORT: When selecting the "SOFORT" payment method , payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of the Klarna Group. The transfer of your data is made exclusively for the purpose of payment processing and only to the extent necessary for this purpose.
8 REVIEW REMINDER We use your e-mail address as a one-time reminder to submit a review of your order to the review system we use, provided that you have given us your express consent in accordance with Art. 6 (1)(a) of the GDPR during or after your order. You can revoke your consent at any time by sending a message to the data controller.
9 USE OF SOCIAL NETWORKS: SOCIAL PLUGINS
9.1 — Facebook plugins (Shariff Solution) Our website uses so-called social plugins from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. To increase the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins, but only via an HTML link. This ensures that no connection is established with Facebook's servers when you access a page of our website that contains these buttons. When you click on the button, a new browser window opens, which opens the Facebook page where you can interact with the plugins.
9.2 — Google+ plugins (Shariff solution) Our website uses social plugins from the Google+ social network, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View CA 94043, USA. The same Shariff solution for HTML links is used for data protection, ensuring that there is no direct connection to Google servers until you actively click on the button.
9.3 — Instagram plugin (Shariff solution) Our website uses social plugins from the Instagram online service, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. The same Shariff solution for HTML links is applied, ensuring that no connection is established with Instagram servers until you actively click on the button.
10 ONLINE MARKETING
10.1 — Google DoubleClick This website uses the online marketing tool DoubleClick by Google (Google LLC). DoubleClick uses cookies to show relevant ads to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Processing is carried out based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6(1)(f) GDPR. According to Google, DoubleClick cookies do not contain any personal information.
10.2 — Google Ad Words Conversion Tracking This website uses the online advertising program Google Ad Words and its conversion tracking. We use Google Ad Words to draw attention to our attractive offers on external websites. The conversion tracking cookie is set when a user clicks on a Google Ad Words ad. These cookies usually expire after 30 days and are not used for personal identification. The processing is carried out based on our legitimate interest in accordance with Art. 6(1)(f) GDPR.
11 WEB ANALYTICS SERVICES
Google (Universal) Analytics This website uses Google Analytics, a web analysis service provided by Google LLC. Google Analytics uses cookies that enable the analysis of your use of the website. This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which guarantees the anonymization of the IP address by truncation and excludes direct personal reference. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity and provide other services related to website and internet use. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. This website also uses Google Analytics for the analysis of visitor flows between devices, carried out using a user ID. On the first visit to the page a unique, permanent and anonymized ID is assigned, which is configured on all devices. The user ID does not contain personal data and does transmit such data to Google. You can object to the collection and storage of data via the user ID any time, with effect for the .
12 RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING
Facebook Custom Audience (Pixel) This website uses the "Facebook Pixel" of Facebook Inc. If express consent is given, user behavior can be tracked after they have viewed or clicked on a Facebook ad. This procedure serves to evaluate the effectiveness of Facebook ads for statistical and market research purposes. The collected data are anonymous to us. However, the data is stored and processed by Facebook. Processing is only carried out with express consent pursuant to Art. 6(1)(a) GDPR. Consent to use the Facebook Pixel can only be given by users over 13 years old.
Our website uses the remarketing functions of Google Ad Words. Google sets a cookie on your device's browser, which automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. Processing is carried out based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Further data processing only occurs if you have agreed that your internet and app browsing history can be linked by Google to your Google account.
13 DATA SUBJECT RIGHTS
13.1 The applicable data protection law grants you comprehensive data subject rights (access and intervention rights) vis-à-vis the controller of your personal data: Right to access (Art. 15 GDPR): Right to information about your personal data processed, purposes of processing, categories, recipients, planned storage period and more. Right to rectification (Art. 16 GDPR): Right to immediate rectification of inaccurate data and/or completion of incomplete data stored by us. Right to erasure (Art. 17 GDPR): Right to request the erasure of your personal data when the conditions of Art 17(1) GDPR are met. Right to restriction of processing (Art. 18 GDPR): Right to request restriction of the processing of your personal data. Right to notification (Art. 19 GDPR): Right to be informed about all recipients to whom personal data has been provided. Right to data portability (Art. 20 GDPR): Right to receive your personal data in a structured, commonly used and machine-readable format. Right to withdraw consent (Art. 7(3) GDPR): Right to withdraw consent at any time with effect for the future. Right to lodge a complaint (Art. 77 GDPR): Right to lodge a complaint with a supervisory
supervisor.
13.2 — Right to Object Right to Object: If we process your personal data based on our overriding legitimate interest within the framework of a balancing of interests, you have the right at any time to object to this processing with future effect for reasons arising from your particular situation. If you exercise your right to object, we will stop processing the corresponding data. However, further processing remains reserved if we can demonstrate compelling legitimate grounds that override your interests, rights and fundamental freedoms, or if the processing serves the assertion, exercise or defense of legal claims. Direct Marketing: If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing. If you exercise your right to object, we will stop processing the corresponding data for direct marketing purposes.
14 DURATION OF STORAGE OF PERSONAL DATA
The duration of personal data storage is based on the relevant statutory retention period (e.g., commercial and tax retention periods). After the expiry of the period, the corresponding data is routinely deleted as long as it is no longer required for the performance or initiation of a contract and/or there is no longer any legitimate interest on our part in continuing to store it."