Privacy Policy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This applies only insofar as no other indication is given for the following processing operations.
"Personal data" means all information relating to an identified or identifiable natural person.
Contact
Data Controller
Feel free to contact us. The data controller is: Carlos Ramon Aspiazu Velez, Friedrich-List-Strasse 69, 60386 Frankfurt am Main Germany, 017630690935, basketballhub.info@gmail.com
Customer initiating contact via email
If you initiate business contact with us via email, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of processing and responding to your contact request.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchase interest, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of contacting you.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchase interest, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the cancellation button
Customer account
When opening a customer account, we collect your personal data to the extent indicated therein. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. Your customer account will then be deleted.
Reviews Advertising
Data collection when creating a comment or review
When you comment on or review an item or post, we only collect your personal data (name, email address, comment text) to the extent you provide it. The processing is for the purpose of enabling a comment/review and displaying comments/reviews.
For the purpose of verifying your review/comment, we also collect the following data: Order number, , , .
By submitting the comment/review, you consent to the processing of the submitted data. The processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. Your personal data will then be deleted.
When your comment/review is published, only the name you provided will be published.
Trustami customer review
To display the collected reviews as well as social media feedback, the Trustami trust seal is embedded on this website. This serves to implement our legitimate interests in optimally marketing our offer on our own website in accordance with Art. 6(1)(f) GDPR. When the Trustami trust seal is accessed, the web server automatically stores data (access data) in the form of a server log file, which contains the name of the accessed website, the file, the date and time of access, your IP address in shortened form, the amount of data transmitted, the message about a successful access, the browser type, the user's operating system, the referrer URL (the previously visited page) and the requesting provider. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit. The Trustami trust seal and the services advertised therewith are an offer of Trustami GmbH, Schröderstraße 5, 10115 Berlin. For the processing of the data collected by Trustami, the privacy policy of Trustami applies at www.trustami.com/datenschutz.
Use of the email address for sending newsletters
We use your email address to send information and offers via newsletter, provided you have expressly agreed to this. The data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address as well as, if applicable, other data that you have voluntarily provided as part of signing up for our newsletter.
The processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR from our and your legitimate interest in preventing the reuse of your email address for sending our newsletter. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.
Use of the email address for sending direct advertising
We use your email address, which we received in the context of the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is required for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You can find the contact details for exercising the objection in the legal notice. You can also use the link provided for this purpose in the promotional email. No other costs than the transmission costs according to the basic tariffs will arise for this.
Use of Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for newsletter distribution within the framework of data processing on behalf of a third party.
We pass on the information you provided during the newsletter signup (email address, first and last name, if applicable) to Klaviyo. The data processing serves the purpose of newsletter distribution and its statistical evaluation.
To evaluate newsletter campaigns, the sent newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you opened the newsletter and whether you clicked on any embedded links. In this context, we collect your personal data such as your IP address, browser type, device, and the time. From this data, usage profiles can be created under a pseudonym. The collected data is not used to personally identify you. The collected data is only used for statistical evaluation to improve newsletter campaigns.
Your data is generally transferred to servers of Klaviyo in the USA and stored there. An EU Commission adequacy decision exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and thus committed to complying with European data protection principles.
The processing of your personal data is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in a targeted, advertising-effective, and user-friendly newsletter system. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.
More information about data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice as well as at https://www.klaviyo.com/legal/data-processing-agreement.
Use of PayPal
We use the PayPal payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
All PayPal transactions are subject to the PayPal privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is required that PayPal collects, stores, and analyzes data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.
The processing of your personal data is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. More information about data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
Cookies may be stored here, enabling the recognition of your browser. The data processing taking place thereby is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right, if applicable, to obtain a credit report based on mathematical-statistical methods using credit reporting agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reporting agency and uses the received information about the statistical probability of a payment default to make a balanced decision about establishing, carrying out, or terminating the contractual relationship. The credit report may contain probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data is included, among other things, in their calculation. Your protectable interests are taken into account in accordance with the legal provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in protection against payment default when PayPal provides the advance.
You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation by notifying PayPal. The provision of the data is required for the conclusion of the contract with the payment method you desire. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6(1)(b) GDPR. Local third-party providers can be, for example:
Payment via PayPal
When paying using the invoice payment method, the data required to process the payment is first transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. If necessary, Ratepay may conduct a credit check based on mathematical-statistical methods (probability or score values) using credit reference agencies following the process described above. The processing of data is for the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment defaults when Ratepay provides the payment in advance. Further information on data protection and which credit reference agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the corresponding privacy notice at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Shopify Payments
We use the "Shopify Payments" payment service by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment is processed by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The processing of data is for the purpose of being able to offer you payment via the Shopify Payments payment service. By selecting and using a corresponding "Shopify Payments" payment method, the data required to process the payment is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Stripe reserves the right, if necessary, to obtain a credit check based on mathematical-statistical methods using credit reference agencies. To this end, Stripe transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of a payment default to make a balanced decision on establishing, performing or terminating the contractual relationship. The credit check may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods, and address data, among other things, is used in their calculation. Your legitimate interests will be taken into account in accordance with the legal provisions. The processing of data is for the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment defaults when Stripe provides the payment in advance.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you by providing notice to Stripe, on the basis of Art. 6(1)(f) GDPR. The provision of data is required to conclude the contract using your preferred payment method. Failure to provide the data will result in the contract not being concluded using your selected payment method.
Further information on data processing when using the Shopify Payments payment service can be found in the Shopify privacy notice at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing when payment is processed via the Stripe payment service provider can be found in the Stripe privacy notice at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the user's web browser or by the web browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the unique identification of the browser when the website is accessed again.
We use the “Shopify Privacy & Compliance” consent tool from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to grant consent to data processing on the website, in particular the setting of cookies, and to exercise your right to withdraw consent previously given. The purpose of the data processing is to obtain and document the necessary consents to data processing and thus comply with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transmitted to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. An adequacy decision by the European Commission also exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
The data processing is carried out to fulfill a legal obligation under Art. 6(1)(c) GDPR.
Further information on Shopify’s privacy policy can be found at https://www.shopify.com/de/legal/datenschutz.
Analytics Communication
Use of Shopify Analytics
We use the analytics and reporting features of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website under a data processing agreement. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The purpose of the data processing is to analyze this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analytics, and statistics. Among other things, the following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information is also collected about the webpages or products you visit, the referrer URL (the website through which you accessed our website), and how you interact with the website. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
Your data may be transmitted to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. An adequacy decision by the European Commission also exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information on Shopify’s privacy policy can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa, and information on the cookies used at https://www.shopify.com/de/legal/cookies.
Plugins and Other Tools
Use of Social Plugins
We use social media plugins on our website. Social plugins are embedded and process data for the purpose of optimizing advertising for our products.
When social plugins are embedded, a connection is established between your computer and the servers of the social media provider, and the plugin is displayed on the page by communicating with your browser, provided you have expressly consented. Your IP address and information about which of our pages you have visited are both transmitted to the provider’s servers. This applies regardless of whether you are registered with or logged into the social media network. Data is also transmitted for users who are not registered with or logged into the social media network. If you are simultaneously connected to one or more of your social media accounts, the collected information may also be associated with your respective profiles. When you use the plugin features (e.g., by clicking the button), this information is also associated with your user account. You can prevent this association by logging out of your social media accounts before visiting our website and activating the buttons.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
The social media networks listed below are embedded on our website via social plugins. Further information on the scope and purpose of the collection and use of data, as well as your rights and options for protecting your privacy, can be found in the providers’ linked privacy notices.
Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for the collection of your data when the service is embedded and the transmission of this data to Facebook. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which sets out the respective responsibilities. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. Accordingly, we are responsible in particular for fulfilling the information obligations under Art. 13 and 14 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling data subjects’ rights under Art. 15–20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach affects Meta Platforms Ireland’s obligations under the joint processing agreement.
Your data may be transmitted to the United States. An adequacy decision by the European Commission exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and thus committed to complying with European data protection principles.
Further information on Facebook’s collection and use of data, your rights in this regard, and options for protecting your privacy can be found in Facebook’s privacy notice at https://www.facebook.com/about/privacy/.
Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)
https://policy.pinterest.com/de/privacy-policy
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.
Use of social plug-ins using the "2-click solution"
We use social media plug-ins on our website using the "2-click solution". No connections are established to the social media servers without your express consent, and therefore no data is transmitted.
With the default integration of plug-ins, when you access pages on our website that contain such a plug-in, a connection is established between your computer and the servers of the social media providers, and the plug-in is displayed on the page by communicating with your browser. Both your IP address and the information about which of our pages you visited are transmitted to the provider servers. This applies regardless of whether you are registered with or logged into the social network. Data is also transmitted for users who are not registered or logged in. Furthermore, if you are logged into the social network Facebook, this information will be associated with your personal user account. When using the plug-in functions (e.g. by clicking the button), this information will also be associated with your user account, which you can only prevent by logging out before using the plug-in. To ensure that you retain control over your data, we have decided to initially deactivate the corresponding button. You can recognize this by the greyed-out button. Without your express consent - in the form of activating the button - no connection to the social network server is established and therefore no data is transmitted.
Only when you activate the button will the button become active (highlighted in color) and a direct connection to the social network servers will be established.
By activating it, you consent to the transfer of your data to the respective social network provider. During this process, both your IP address and the information about which of our pages you visited are transmitted, among other data. If you are simultaneously connected to one or more of your social network accounts, the collected information will also be associated with your respective profiles. You can only prevent this association by logging out of your social network user accounts before visiting our website and activating the buttons.
The social networks listed below are integrated using the "2-click function". Further information on the scope and purpose of the collection and use of data, as well as your rights and options to protect your privacy, can be found in the linked privacy notices of the providers.
Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thus committed to complying with European data protection principles.
Instagram by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
http://instagram.com/legal/privacy/
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thus committed to complying with European data protection principles.
Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA):
https://policy.pinterest.com/de/privacy-policy
https://help.pinterest.com/de/articles/personalization-and-data
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.
Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website as part of a data processing agreement. The query serves the purpose of distinguishing input by a human from automated, machine processing. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transferred to Google. This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) Sentence 1 TDDDG in conjunction with Art. 6(1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on consent until revocation.
Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This serves the purpose of distinguishing input by a human from automated, machine processing. In the background, Google collects and analyzes usage data, which is used by Invisible reCaptcha to distinguish regular users from bots. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and any other data required by Google for the Invisible reCAPTCHA service are transferred to Google.
This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) Sentence 1 TDDDG in conjunction with Art. 6(1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on consent until revocation.
Further information on Google reCAPTCHA as well as the associated privacy notice can be found at: https://www.google.com/recaptcha/intro/android.html as well as https://www.google.com/privacy
Integration of the Händlerbund Member Logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated on our website. When you access our website, information is automatically sent to the server of Händlerbund e.V. by the browser used on your device. This information is temporarily stored in a so-called server log file for 7 days. The following information is captured without your involvement and stored until it is automatically deleted:
Data Subject Rights and Retention Period
Duration of Storage
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then in consideration of statutory, in particular tax and commercial retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.
Rights of the Data Subject
If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right to information, rectification, erasure, restriction of processing, and data portability.
In addition, under Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1) lit. f GDPR, as well as to processing for direct marketing purposes.
Right to Complain to the Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
You can file a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:
Hessischer Beauftragter für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Tel.: +49 611 14080
Fax: +49 611 1408900 or +49 611 1408901
Email: poststelle@datenschutz.hessen.de
Right to Object
If the personal data processing listed here is based on our legitimate interest under Art. 6(1) lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
Once an objection has been received, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data processing is carried out for direct marketing purposes, you can object to this processing at any time by notifying us. Once an objection has been received, we will terminate the processing of the data concerned for direct marketing purposes.
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This applies only insofar as no other indication is given for the following processing operations.
"Personal data" means all information relating to an identified or identifiable natural person.
Server Log Files
You can visit our websites without providing any information about yourself.
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transmitted, and the requesting provider.
Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our offer.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the European Commission exists for Canada. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the European Commission's standard contractual clauses.Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our offer.
Contact
Data Controller
Feel free to contact us. The data controller is: Carlos Ramon Aspiazu Velez, Friedrich-List-Strasse 69, 60386 Frankfurt am Main Germany, 017630690935, basketballhub.info@gmail.com
Customer initiating contact via email
If you initiate business contact with us via email, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of processing and responding to your contact request.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchase interest, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of contacting you.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchase interest, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the cancellation button
If you cancel a subscription contract concluded through our online presence using the legally required cancellation button ("cancellation button"), we process the data you enter in the confirmation screen. When using the cancellation button, we only collect your personal data (name, email address, your telephone number if applicable, details identifying the contract you wish to cancel, as well as the time (date and time) of sending the declaration of cancellation) to the extent you provide it. The data processing is for the purpose of providing you with the legally required option to cancel your continuing contractual relationship and to properly process your cancellation.
If the contact concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. Otherwise, the data processing is based on Art. 6(1)(c) GDPR, as we are legally obliged to provide you with a cancellation button on our online presence.
We only use your email address to process your declaration of cancellation. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Customer account Orders Customer account
When opening a customer account, we collect your personal data to the extent indicated therein. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. Your customer account will then be deleted.
Collection, processing, and disclosure of personal data for orders
When placing an order, we only collect and process your personal data to the extent necessary to fulfill and process your order and to process your requests. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. The processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transmission is limited to the minimum necessary.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An EU Commission adequacy decision exists for Canada. An EU Commission adequacy decision exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.Reviews Advertising
Data collection when creating a comment or review
When you comment on or review an item or post, we only collect your personal data (name, email address, comment text) to the extent you provide it. The processing is for the purpose of enabling a comment/review and displaying comments/reviews.
For the purpose of verifying your review/comment, we also collect the following data: Order number, , , .
By submitting the comment/review, you consent to the processing of the submitted data. The processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. Your personal data will then be deleted.
When your comment/review is published, only the name you provided will be published.
Trustami customer review
To display the collected reviews as well as social media feedback, the Trustami trust seal is embedded on this website. This serves to implement our legitimate interests in optimally marketing our offer on our own website in accordance with Art. 6(1)(f) GDPR. When the Trustami trust seal is accessed, the web server automatically stores data (access data) in the form of a server log file, which contains the name of the accessed website, the file, the date and time of access, your IP address in shortened form, the amount of data transmitted, the message about a successful access, the browser type, the user's operating system, the referrer URL (the previously visited page) and the requesting provider. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit. The Trustami trust seal and the services advertised therewith are an offer of Trustami GmbH, Schröderstraße 5, 10115 Berlin. For the processing of the data collected by Trustami, the privacy policy of Trustami applies at www.trustami.com/datenschutz.
Use of the email address for sending newsletters
We use your email address to send information and offers via newsletter, provided you have expressly agreed to this. The data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address as well as, if applicable, other data that you have voluntarily provided as part of signing up for our newsletter.
The processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR from our and your legitimate interest in preventing the reuse of your email address for sending our newsletter. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.
Use of the email address for sending direct advertising
We use your email address, which we received in the context of the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is required for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You can find the contact details for exercising the objection in the legal notice. You can also use the link provided for this purpose in the promotional email. No other costs than the transmission costs according to the basic tariffs will arise for this.
Use of Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for newsletter distribution within the framework of data processing on behalf of a third party.
We pass on the information you provided during the newsletter signup (email address, first and last name, if applicable) to Klaviyo. The data processing serves the purpose of newsletter distribution and its statistical evaluation.
To evaluate newsletter campaigns, the sent newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you opened the newsletter and whether you clicked on any embedded links. In this context, we collect your personal data such as your IP address, browser type, device, and the time. From this data, usage profiles can be created under a pseudonym. The collected data is not used to personally identify you. The collected data is only used for statistical evaluation to improve newsletter campaigns.
Your data is generally transferred to servers of Klaviyo in the USA and stored there. An EU Commission adequacy decision exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and thus committed to complying with European data protection principles.
The processing of your personal data is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in a targeted, advertising-effective, and user-friendly newsletter system. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.
More information about data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice as well as at https://www.klaviyo.com/legal/data-processing-agreement.
Use of the email address for availability notifications
We offer the product availability notification service on our website. If an item is temporarily unavailable, you have the option to enter your email address on the respective item and be informed by us via email when it becomes available, provided you have agreed to this. You will receive a one-time email notification about the availability of the respective item when it becomes available. The processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.
Payment service provider We offer the product availability notification service on our website. If an item is temporarily unavailable, you have the option to enter your email address on the respective item and be informed by us via email when it becomes available, provided you have agreed to this. You will receive a one-time email notification about the availability of the respective item when it becomes available. The processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.
Use of PayPal
We use the PayPal payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
All PayPal transactions are subject to the PayPal privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Plus
We use the PayPal Plus payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
For individual payment methods such as credit card via PayPal and direct debit via PayPal, PayPal reserves the right, if applicable, to obtain a credit report based on mathematical-statistical methods using credit reporting agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reporting agency and uses the received information about the statistical probability of a payment default to make a balanced decision about establishing, carrying out, or terminating the contractual relationship. The credit report may contain probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data is included, among other things, in their calculation. Your protectable interests are taken into account in accordance with the legal provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in protection against payment default when PayPal provides the advance.
You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation by notifying PayPal. The provision of the data is required for the conclusion of the contract with the payment method you desire. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is required that PayPal collects, stores, and analyzes data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.
The processing of your personal data is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. More information about data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
Cookies may be stored here, enabling the recognition of your browser. The data processing taking place thereby is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right, if applicable, to obtain a credit report based on mathematical-statistical methods using credit reporting agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reporting agency and uses the received information about the statistical probability of a payment default to make a balanced decision about establishing, carrying out, or terminating the contractual relationship. The credit report may contain probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data is included, among other things, in their calculation. Your protectable interests are taken into account in accordance with the legal provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in protection against payment default when PayPal provides the advance.
You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation by notifying PayPal. The provision of the data is required for the conclusion of the contract with the payment method you desire. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6(1)(b) GDPR. Local third-party providers can be, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Payment via PayPal
When paying using the invoice payment method, the data required to process the payment is first transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. If necessary, Ratepay may conduct a credit check based on mathematical-statistical methods (probability or score values) using credit reference agencies following the process described above. The processing of data is for the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment defaults when Ratepay provides the payment in advance. Further information on data protection and which credit reference agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the corresponding privacy notice at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of the Stripe payment service
We use the Stripe payment service on our website (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). The processing of data is for the purpose of being able to offer you payment via the payment service. By selecting and using Stripe, the data required to process the payment is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Stripe reserves the right, if necessary, to obtain a credit check based on mathematical-statistical methods using credit reference agencies. To this end, Stripe transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of a payment default to make a balanced decision on establishing, performing or terminating the contractual relationship. The credit check may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods, and address data, among other things, is used in their calculation. Your legitimate interests will be taken into account in accordance with the legal provisions. The processing of data is for the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment defaults when Stripe provides the payment in advance.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you by providing notice to Stripe, on the basis of Art. 6(1)(f) GDPR. The provision of data is required to conclude the contract using your preferred payment method. Failure to provide the data will result in the contract not being concluded using your selected payment method.
All Stripe transactions are subject to the Stripe privacy notice. This can be found at https://stripe.com/de/privacy
We use the "Shopify Payments" payment service by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment is processed by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The processing of data is for the purpose of being able to offer you payment via the Shopify Payments payment service. By selecting and using a corresponding "Shopify Payments" payment method, the data required to process the payment is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Stripe reserves the right, if necessary, to obtain a credit check based on mathematical-statistical methods using credit reference agencies. To this end, Stripe transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of a payment default to make a balanced decision on establishing, performing or terminating the contractual relationship. The credit check may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods, and address data, among other things, is used in their calculation. Your legitimate interests will be taken into account in accordance with the legal provisions. The processing of data is for the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment defaults when Stripe provides the payment in advance.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you by providing notice to Stripe, on the basis of Art. 6(1)(f) GDPR. The provision of data is required to conclude the contract using your preferred payment method. Failure to provide the data will result in the contract not being concluded using your selected payment method.
Further information on data processing when using the Shopify Payments payment service can be found in the Shopify privacy notice at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing when payment is processed via the Stripe payment service provider can be found in the Stripe privacy notice at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the user's web browser or by the web browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the unique identification of the browser when the website is accessed again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set and decide individually on acceptance, as well as prevent the storage of cookies and the transmission of the data contained therein. Already stored cookies can be deleted at any time. However, we point out that you may not be able to fully use all the functions of this website.
Under the links below, you can find out how you can manage cookies in the most important browsers (including disabling them):
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically Necessary Cookies
Unless otherwise stated in the privacy notice below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after changing pages.
The use of cookies or comparable technologies is carried out on the basis of Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.
Use of Complianz GDPR Cookie Consent
We use the Complianz GDPR Cookie Consent plugin by iubenda s.r.l (Via San Raffaele 1, 20121 Milan, Italy; "iubenda") on our website.
The plugin enables you to give consent to data processing via the website, in particular the setting of cookies, as well as to make use of your right of withdrawal for consents already given. The processing of data is for the purpose of obtaining and documenting necessary consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. The following information may be collected and transmitted to iubenda, among other things: uniquely identifiable ID, consent status. This data is not passed on to other third parties.
The processing of data is carried out to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection can be found at: https://complianz.io/de/legal-deutsch/datenschutzerklaerung-von-complianz-shopify/
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)We use the “Shopify Privacy & Compliance” consent tool from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to grant consent to data processing on the website, in particular the setting of cookies, and to exercise your right to withdraw consent previously given. The purpose of the data processing is to obtain and document the necessary consents to data processing and thus comply with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transmitted to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. An adequacy decision by the European Commission also exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
The data processing is carried out to fulfill a legal obligation under Art. 6(1)(c) GDPR.
Further information on Shopify’s privacy policy can be found at https://www.shopify.com/de/legal/datenschutz.
Analytics Communication
Use of Shopify Analytics
We use the analytics and reporting features of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website under a data processing agreement. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The purpose of the data processing is to analyze this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analytics, and statistics. Among other things, the following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information is also collected about the webpages or products you visit, the referrer URL (the website through which you accessed our website), and how you interact with the website. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
Your data may be transmitted to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. An adequacy decision by the European Commission also exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information on Shopify’s privacy policy can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa, and information on the cookies used at https://www.shopify.com/de/legal/cookies.
Use of Shopify Inbox
We use the Shopify Inbox live chat system from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website under a data processing agreement. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The purpose of the data processing is to enable direct and efficient communication between you and us as the provider. Data is stored and processed to operate the system and optimize the service.
Cookies may be used to operate the live chat system and allow the browser to be recognized. The following information may be collected and processed: your IP address and the personal data you provide when using the chat system.
Your data may be transmitted to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. An adequacy decision by the European Commission also exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information on Shopify’s privacy policy can be found at https://www.shopify.com/de/legal/datenschutz and https://www.shopify.com/de/legal/dpa.
We use the Shopify Inbox live chat system from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website under a data processing agreement. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The purpose of the data processing is to enable direct and efficient communication between you and us as the provider. Data is stored and processed to operate the system and optimize the service.
Cookies may be used to operate the live chat system and allow the browser to be recognized. The following information may be collected and processed: your IP address and the personal data you provide when using the chat system.
Your data may be transmitted to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. An adequacy decision by the European Commission also exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transmission is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information on Shopify’s privacy policy can be found at https://www.shopify.com/de/legal/datenschutz and https://www.shopify.com/de/legal/dpa.
Plugins and Other Tools
Use of Social Plugins
We use social media plugins on our website. Social plugins are embedded and process data for the purpose of optimizing advertising for our products.
When social plugins are embedded, a connection is established between your computer and the servers of the social media provider, and the plugin is displayed on the page by communicating with your browser, provided you have expressly consented. Your IP address and information about which of our pages you have visited are both transmitted to the provider’s servers. This applies regardless of whether you are registered with or logged into the social media network. Data is also transmitted for users who are not registered with or logged into the social media network. If you are simultaneously connected to one or more of your social media accounts, the collected information may also be associated with your respective profiles. When you use the plugin features (e.g., by clicking the button), this information is also associated with your user account. You can prevent this association by logging out of your social media accounts before visiting our website and activating the buttons.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
The social media networks listed below are embedded on our website via social plugins. Further information on the scope and purpose of the collection and use of data, as well as your rights and options for protecting your privacy, can be found in the providers’ linked privacy notices.
Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for the collection of your data when the service is embedded and the transmission of this data to Facebook. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which sets out the respective responsibilities. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. Accordingly, we are responsible in particular for fulfilling the information obligations under Art. 13 and 14 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling data subjects’ rights under Art. 15–20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach affects Meta Platforms Ireland’s obligations under the joint processing agreement.
Your data may be transmitted to the United States. An adequacy decision by the European Commission exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and thus committed to complying with European data protection principles.
Further information on Facebook’s collection and use of data, your rights in this regard, and options for protecting your privacy can be found in Facebook’s privacy notice at https://www.facebook.com/about/privacy/.
Instagram by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388
Your data may be transmitted to the United States. An adequacy decision by the European Commission exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and thus committed to complying with European data protection principles.
https://help.instagram.com/155833707900388
Your data may be transmitted to the United States. An adequacy decision by the European Commission exists for the United States under the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and thus committed to complying with European data protection principles.
Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)
https://policy.pinterest.com/de/privacy-policy
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.
Use of social plug-ins using the "2-click solution"
We use social media plug-ins on our website using the "2-click solution". No connections are established to the social media servers without your express consent, and therefore no data is transmitted.
With the default integration of plug-ins, when you access pages on our website that contain such a plug-in, a connection is established between your computer and the servers of the social media providers, and the plug-in is displayed on the page by communicating with your browser. Both your IP address and the information about which of our pages you visited are transmitted to the provider servers. This applies regardless of whether you are registered with or logged into the social network. Data is also transmitted for users who are not registered or logged in. Furthermore, if you are logged into the social network Facebook, this information will be associated with your personal user account. When using the plug-in functions (e.g. by clicking the button), this information will also be associated with your user account, which you can only prevent by logging out before using the plug-in. To ensure that you retain control over your data, we have decided to initially deactivate the corresponding button. You can recognize this by the greyed-out button. Without your express consent - in the form of activating the button - no connection to the social network server is established and therefore no data is transmitted.
Only when you activate the button will the button become active (highlighted in color) and a direct connection to the social network servers will be established.
By activating it, you consent to the transfer of your data to the respective social network provider. During this process, both your IP address and the information about which of our pages you visited are transmitted, among other data. If you are simultaneously connected to one or more of your social network accounts, the collected information will also be associated with your respective profiles. You can only prevent this association by logging out of your social network user accounts before visiting our website and activating the buttons.
The social networks listed below are integrated using the "2-click function". Further information on the scope and purpose of the collection and use of data, as well as your rights and options to protect your privacy, can be found in the linked privacy notices of the providers.
Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thus committed to complying with European data protection principles.
Instagram by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
http://instagram.com/legal/privacy/
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thus committed to complying with European data protection principles.
Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA):
https://policy.pinterest.com/de/privacy-policy
https://help.pinterest.com/de/articles/personalization-and-data
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.
Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website as part of a data processing agreement. The query serves the purpose of distinguishing input by a human from automated, machine processing. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transferred to Google. This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) Sentence 1 TDDDG in conjunction with Art. 6(1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on consent until revocation.
Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This serves the purpose of distinguishing input by a human from automated, machine processing. In the background, Google collects and analyzes usage data, which is used by Invisible reCaptcha to distinguish regular users from bots. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and any other data required by Google for the Invisible reCAPTCHA service are transferred to Google.
This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) Sentence 1 TDDDG in conjunction with Art. 6(1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on consent until revocation.
Further information on Google reCAPTCHA as well as the associated privacy notice can be found at: https://www.google.com/recaptcha/intro/android.html as well as https://www.google.com/privacy
Integration of the Händlerbund Member Logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated on our website. When you access our website, information is automatically sent to the server of Händlerbund e.V. by the browser used on your device. This information is temporarily stored in a so-called server log file for 7 days. The following information is captured without your involvement and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the file retrieved,
- Website from which the access occurred (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
Data Subject Rights and Retention Period
Duration of Storage
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then in consideration of statutory, in particular tax and commercial retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.
Rights of the Data Subject
If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right to information, rectification, erasure, restriction of processing, and data portability.
In addition, under Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1) lit. f GDPR, as well as to processing for direct marketing purposes.
Right to Complain to the Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
You can file a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:
Hessischer Beauftragter für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Tel.: +49 611 14080
Fax: +49 611 1408900 or +49 611 1408901
Email: poststelle@datenschutz.hessen.de
Right to Object
If the personal data processing listed here is based on our legitimate interest under Art. 6(1) lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
Once an objection has been received, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data processing is carried out for direct marketing purposes, you can object to this processing at any time by notifying us. Once an objection has been received, we will terminate the processing of the data concerned for direct marketing purposes.