January 1, 2023
Personal Information We Collect
This data protection declaration is based on the terms used by the European legislator when issuing the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.
When you visit the Website, we automatically collect certain information about your device, including information about the web browser, IP address, time zone and some of the cookies installed on your device. As you navigate the Site, we also collect information about the individual web pages or products that you view, the websites or search terms that brought you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as “Device Information.”
We collect device information using the following technologies:
- “Cookies” are data files stored on a device or computer that often contain an anonymous unique identifier. Further information about cookies and how to disable cookies can be found at http://www.allaboutcookies.org .
- “Log files” log actions on the Site and collect information such as IP address, browser type, Internet service provider, referring/exit pages, and date/time stamp.
- “Web beacons,” “tags,” and “pixels” are electronic files used to collect information about how you navigate the Site.
When you purchase or attempt to purchase something on the Site, we also collect certain information about you. This includes name, billing address, shipping address, payment information (including credit card numbers and payment details), email address and telephone number. We refer to this information as “Order Information.”
There is no personal evaluation of the server log files. The provider cannot at any time assign this data to specific persons. This data will not be merged with other data sources.
The data subject has the opportunity to register on the website of the controller by providing personal data. Which personal data is transmitted to the person responsible for processing is determined by the respective input mask used for registration. The personal data entered by the data subject will be collected and stored exclusively for internal use by the data controller and for its own purposes. The data controller may arrange for the data to be passed on to one or more processors, for example a parcel service provider, who also uses the personal data exclusively for internal use that is attributable to the data controller.
By registering on the website of the controller, the IP address assigned by the data subject's Internet service provider (ISP) and the date and time of registration are also stored. This data is stored against the background that this is the only way to prevent misuse of our services and, if necessary, this data makes it possible to investigate crimes that have been committed. In this respect, the storage of this data is necessary to protect the data controller. In principle, this data will not be passed on to third parties unless there is a legal obligation to pass it on or the transfer serves the purpose of criminal prosecution.
The registration of the data subject by voluntarily providing personal data enables the data controller to offer the data subject content or services that, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from the data base of the person responsible for processing.
The person responsible for processing will provide each data subject with information at any time upon request as to what personal data is stored about the data subject. Furthermore, the person responsible for processing corrects or deletes personal data at the request or notification of the data subject, provided that there are no legal retention obligations to the contrary. All of the controller's employees are available to the data subject as contact persons in this context.
How do we use your personal data?
We typically use the order information we collect to fulfill orders we receive through the Site (including, but not limited to, processing your payment information, arranging for shipping, and sending you invoices and/or order confirmations).
We also use this order information to:
- Communication with you
- Checking our orders for potential risks or fraud
- Providing you with information or advertising relating to our products or services, provided this is consistent with your privacy settings.
We use the device information we collect to check for potential risks and fraud (in particular your IP address) and generally to improve and optimize our website (for example, by analyzing our customers' navigation behavior and their interaction with the website and to assess its success our marketing and advertising campaigns).
We share your personal information with third parties who assist us in using your personal information as described above.
For example, we use Shopify to run our online store. For more information about how Shopify uses your personal information, please visit: https://www.shopify.com/legal/privacy .
We also use Google Analytics to understand how our customers use the website. Google Analytics, a web analysis service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. (“Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and thereby enable your use of the website to be analyzed. For example, information about the operating system, the browser, your IP address, the website you previously accessed (referrer URL) and the date and time of your visit to our website are recorded. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to fully use all of the functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser plug-in available under the following link. Download and install: http://tools.google.com .
We use Google Analytics to analyze the use of our website and to regularly improve it. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. If we ask you for your consent, the legal basis for the processing is Article 6 (1) (a) GDPR. Otherwise, the legal basis for the use of Google Analytics is Art. 6 Paragraph 1 Sentence 1 Letter f GDPR
Further information on how Google uses your personal data and third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001: User conditions , overview of data protection , the data protection declaration .
You can deactivate Google Analytics here: https://tools.google.com/dlpage/gaoptout .
This website uses the YouTube embedding function to display and play videos from the provider “Youtube”.
Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which can trigger further data processing operations without our influence.
All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent to this in accordance with Article 6 Paragraph 1 Letter a of the GDPR. Without this consent, YouTube videos will not be used during your visit to the site.
You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website using alternative options notified to you on the website.
Finally, we may also disclose your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
The payment service provider is responsible for your payment data. We would like to point out that this will transmit your personal data to other bodies necessary for payment processing, in particular to the credit institutions, banks and credit card companies involved. Your personal data is also processed there to process payment.
As described above, we use your personal information to provide you with targeted advertising or marketing communications that we believe may be of interest to you. For more information about how targeted advertising works, please visit the Network Advertising Initiative ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work .
You can opt out of targeted ads here:
- FACEBOOK – https://www.facebook.com/settings/?tab=ads
- GOOGLE – https://www.google.com/settings/ads/anonymous
- BING – https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
In addition, you may opt out of some of these services through the Digital Advertising Alliance opt-out portal: http://optout.aboutads.info/ .
If you are a European resident, you have the right to access, request correction, update or deletion of the personal information we hold about you.
The applicable data protection law grants you the following data subject rights (rights of information and rights of intervention) vis-à-vis the person responsible for the processing of your personal data, whereby reference is made to the legal basis listed for the respective exercise requirements:
- Right to information in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to deletion in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to information in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
- Right to complain in accordance with Art. 77 GDPR.
If you would like to exercise this right, please contact us using the contact details below. If you have given your consent to the use of data, you can revoke it at any time and without giving reasons.
If you are a European resident, please note that we process your data to fulfill contracts with you (e.g. when you place an order through the Website) or to pursue our legitimate business interests mentioned above. Please also note that your information will be transferred outside of Europe, including Canada and the United States.
If your data is processed based on legitimate interests in accordance with Art. 6 Para. 1 lit f) GDPR, you have the right to object in accordance with Art. 21 GDPR. You also have the right to data portability. You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
Retention of data
When you place an order through the Site, we will retain your order information for our records unless you ask us to delete this information.
The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing and - if relevant - additionally based on the respective legal retention period (e.g. retention periods under commercial and tax law).
If the storage purpose no longer applies or if a storage period prescribed by the European legislator or another responsible legislator expires, the personal data will be blocked or deleted routinely and in accordance with legal regulations.
When processing personal data on the basis of express consent in accordance with Article 6 (1) (a) GDPR, this data will be stored until the person concerned revokes their consent.
Contact - person responsible
If you require more information about our privacy practices, have any questions, or would like to make a complaint, please contact us by email at firstname.lastname@example.org or by mail at the address below:
Florian Braun - Disc Wolf
79576 Weil am Rhein
This is also the person responsible within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature.