In the following we will inform you about the type, scope and purpose of the processing of your personal data when using our shop at the address "www.farbkiste.shop". Personal data is all information that relates to an identified or identifiable natural person.

 

The person responsible within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data. The person responsible for the personal data processed in this shop within the meaning of the GDPR is: Felix Rudolphi, Meisenstraße 40, 46147 Oberhausen, phone 0049 1622172132, email Farbkiste@outlook.com (hereinafter "we").

 

When you visit our website, our server collects the following information from your device: browser type and version, operating system, the previously visited website (“referrer”), IP address and time of the page view.

We collect and process this data in order to ensure the trouble-free operation of our website and to be able to recognize, ward off and track misuse of our services. We also use the collected data for statistical purposes, for example to evaluate the end devices and browsers with which our shop is accessed, in order to continuously adapt and improve our offerings to the needs of the users on this basis. This data processing takes place on the basis of Article 6 Paragraph 1 Letter f GDPR.

We delete all of the above-mentioned personal data no later than twelve months after their collection.

 

When you place an order in our shop, we process your name, the delivery address and your e-mail address as you specify them in the course of the ordering process. If you voluntarily provide additional data when placing your order (e.g. a different billing address or a telephone number), we will also process this data.

We process this data electronically for the proper fulfillment of the contract, in particular for delivery, invoicing, booking payments and processing returns and complaints. This data processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR.

We keep this data stored until all mutual claims from the respective contractual relationship with you have been completely settled and the retention periods under commercial and tax law to which we are subject have expired.

In order to conclude a contract between you and us, it is necessary that we receive your name, the delivery address and your email address. The necessity of providing this data results from legal regulations (e.g. § 312i Paragraph 1 Item 3 BGB, § 14 Paragraph 4 UStG). Without providing this data, you cannot conclude a contract with us.

When deciding whether to conclude a contract, we do not use automated decision-making or profiling.

 

If we send physical goods on the basis of the purchase contract, we will transmit the name and address of the recipient and, if you have consented to this, your e-mail address to Deutsche Post (Deutsche Post AG, 53113 Bonn) or DHL (DHL Paket GmbH, 53113 Bonn) as a shipping service provider, specifically for the purpose of delivering the shipment to you, possibly including a prior e-mail notification about the expected delivery time, and for the purpose of a possible return of your shipment to us on the basis of Article 6 paragraph 1 letter b GDPR.

To pay for your purchase, the payment service provider you choose collects and processes your name, your email address, your card or account number and / or other data, as far as this is necessary for the payment method you have chosen. In this respect, the contractual and data protection provisions of the payment service provider you have chosen also apply.

When we receive a payment, we process the data that the payment service provider transmits to us.

When we receive a transfer to our account, we particularly process the name of the transferring account holder, the account number (IBAN and BIC) and the purpose of the transfer.

The processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR. We keep this data stored until all mutual claims from the respective contractual relationship with you have been completely settled and the retention periods under commercial and tax law to which we are subject have expired.

 

As a technical service provider for the operation of our website on the Internet, we use the services of Shopify) as a processor in accordance with Article 28 GDPR.

 

If you use the contact form on our website, we will process the data you enter in the form, in particular your name, your e-mail address and your message.

If you send us a message by e-mail, we will save your message with the sender data transmitted with it (name, e-mail address and any other information added by your e-mail program and the transmitting servers). We use an e-mail provider to receive, store and send e-mails, who act for us as a processor in accordance with Article 28 GDPR.

The legal basis for this data processing is our legitimate interest in answering your message and also being able to respond to any follow-up questions from you (Article 6 (1) (f) GDPR). We will delete the data collected with your message no later than twelve months after the last communication with you about your request, subject to the regulation in the following paragraph.

If you send us a legally relevant declaration on the contractual relationship (e.g. a revocation or a complaint), the legal basis for the processing, regardless of the transmission method, is also Article 6 (1) (b) GDPR. In such a case, we will delete the data related to your declaration as soon as all reciprocal claims from the contractual relationship have finally been settled and the retention periods under commercial and tax law have expired.

 

If you have subscribed to our newsletter, we will inform you by email about new offers and functions of our shop. You will not receive more than one newsletter per week. You can informally object to the use of your e-mail address for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic tariffs.

This data processing takes place on the basis of your consent in accordance with Article 6 Paragraph 1 Letter a GDPR. If you revoke your consent to the use of your e-mail address for advertising purposes, we will delete your e-mail address from our newsletter distribution list.

 

If you write a comment or a rating on one of our products in our shop, we will publish your contribution in the appropriate place on our shop website together with your user name, for which you can also enter a pseudonym. In order to counteract misuse of our offer, we save the IP address of the device you are writing from for a period of twelve months (Article 6 (1) (f) GDPR). We reserve the right to delete irrelevant or thematically inappropriate contributions at any time. Otherwise, we only delete published articles at the request of the respective author.

 

Social media buttons can be displayed in our shop; they can be recognized by the logos of the social media platforms (hereinafter “platforms”) (Facebook: “f” logo, Instagram: square camera, Pinterest: “p”). These are links to the respective platforms based in the USA. Clicking on such a link calls up the website of the respective platform, whereby the IP address of the calling device and the address of the page from which the link is made (“referrer”) is transmitted to the platform called up in the USA. However, we ourselves do not collect or process any data in connection with the social media buttons.

 

With regard to the personal data that we process about you, you have the following rights:

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, we will inform you of the personal data stored about you and the further information in accordance with Article 15 Paragraph 1 and 2 GDPR.

You have the right to have any incorrect personal data concerning you corrected immediately. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - including by means of a supplementary declaration.

You can request the immediate deletion of your personal data under the conditions of Article 17 Paragraph 1 GDPR, unless their processing is required in accordance with Article 17 Paragraph 3 GDPR.

You can request that we restrict the processing of your data if one of the requirements of Article 18 (1) GDPR is met. In particular, you can request the restriction instead of a deletion.

We will inform all recipients of any correction or deletion of your personal data and restriction of processing to whom we have disclosed personal data relating to you, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you request this.

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format and you can request that we transfer this data to another person responsible without hindrance, as far as this is technically possible.

If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the legality of the data processing that took place up to your withdrawal.

RIGHT TO OBJECT: FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; This right of objection exists in relation to data processing that takes place on the basis of Article 6 Paragraph 1 Letter f GDPR to safeguard legitimate interests on our part or a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail. If you exercise your right of objection, we will no longer process the relevant data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or that the processing of the assertion, exercise or Serves defense of legal claims.

IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT ADVERTISING (E.G. NEWSLETTER), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNED FOR THE PURPOSE OF NOT USING THIS.

If you are of the opinion that the processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation. This does not exclude other administrative or judicial remedies.

 

Notes on data processing in connection with Google Analytics

This website uses Google Analytics, a web analysis service from Google Ireland Limited. If the person responsible for data processing on this website is outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google".

Google Analytics uses so-called "cookies", text files that are stored on the visitor's computer and that enable an analysis of the website visitor's use of the website. The information generated by the cookie about the use of this website by the site visitor (including the abbreviated IP address) is usually transmitted to a Google server and stored there.

Google Analytics is only used on this website with the "_anonymizeIp ()" extension. This extension ensures anonymization of the IP address by shortening it and rules out any direct personal reference. As a result of the extension, Google's IP address will be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by the relevant browser as part of Google Analytics will not be merged with other Google data.

On behalf of the site operator, Google will use the information to evaluate the use of the website, to compile reports on website activity and to provide the site operator with other services related to website and internet use (Art. 6 Para. 1 lit. f GDPR). The legitimate interest in data processing lies in the optimization of this website, the analysis of the use of the website and the adaptation of the content. The interests of the users are adequately protected by the pseudonymisation.

Google LLC. offers a guarantee on the basis of the standard contractual clauses to comply with an appropriate level of data protection. The data sent and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 50 months. The deletion of data whose retention period has expired takes place automatically once a month.

The collection by Google Analytics can be prevented by the page visitor adjusting the cookie settings for this website. The collection and storage of the IP address and the data generated by cookies can also be objected to at any time with future effect. The corresponding browser plug-in can be downloaded and installed from the following link: https://tools.google.com/dlpage/gaoptout.

The page visitor can prevent Google Analytics from collecting data on this website by clicking on the following link clicks. An opt-out cookie is set which prevents the future collection of data when you visit this website.

Further information on the use of data by Google, setting and objection options can be found in Google's data protection declaration (https://policies.google.com/privacy) as well as in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

To protect your inquiries via the Internet form, we use the reCAPTCHA service from Google LLC (Google). The query is used to differentiate whether the input is made by a human or improperly by automated, machine processing. The query includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The different data protection provisions of Google apply to this data. You can find more information about Google's data protection guidelines at: https://policies.google.com/privacy?hl=de