GDPR PRIVACY POLICY

1. What personal data is collected

What information I collect

In order for me to process your order, you must provide me with certain information (which you have authorized me to provide). This includes your name, email address, postal address, payment information and details of the product you are ordering. You also have the option to provide me with additional personal information (for a custom order, for example) if you contact me directly.

2. Legal Bases for Collecting, Using, and Disclosing Personal Information

Why I need your information and how I use it

I rely on a number of legal bases to collect, use and share your information. In fact

  • where I need your information to provide my services, for example to process your order, resolve disputes or provide customer support;
  • if you have given your express consent (which you can revoke at any time), for example by subscribing to my newsletter mailing list;
  • when necessary to comply with a legal obligation or court order, or in connection with a legal claim, such as retaining information about your purchases due to tax legislation; and
  • to the extent necessary for the purposes of my legitimate interests – provided these legitimate interests are not overridden by your rights or interests – e.g 1. to provide and improve my services. I use your information to provide the services you have requested from me and in my legitimate interest to improve my services; and 2. to comply with Seller Policy and Terms of Use. I use your information as necessary to fulfill my obligations under the Seller Policy and Terms of Service.

3. Disclosure of personal data to third parties

Sharing and Disclosure of Information

Customer data is important to my business. I will only release your personal information for specific reasons and under very specific circumstances, as follows:

  • Service Providers: I use certain trusted third parties to perform tasks and provide services for my shop, such as parcel services. I share your personal information with these third parties, but only to the extent necessary to perform those services.
  • Business Transfers: If I sell my business or merge with another, I may disclose your information as part of that transaction, to the extent permitted by law.
  • Compliance with Laws: I may collect, use, retain, and share your information when I have a good faith belief that it is reasonable and necessary to: a) to respond to a legal process or governmental request; b) enforce my contracts, terms and policies; c) prevent, investigate and correct fraud and other illegal activities, security or technical problems, or d) protect the rights, property and safety of my customers or others.

4. How long is personal data stored

Data Retention

I only store your personal data for as long as is necessary to provide you with my services and as described in my privacy policy. However, I may need to retain this information to comply with legal and regulatory obligations, resolve disputes, and enforce my agreements. In general, I keep your data for the following period: 4 years.

5. If he transfers personal data to countries outside of Europe: how this transfer will be carried out

Transfer of personal data to countries outside the EU

I may store and process your information through third party hosting services in the US and other countries. As a result, I may transfer your personal information to countries that have data protection and regulatory surveillance laws that differ from the relevant laws in your country. If I can be deemed to transfer information about you outside of the EU, I rely on the EU-US Privacy Shield as the legal basis for the transfer

6. Newsletter

With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you agree to receive it and the procedures described.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “newsletter”) only with the consent of the recipient or legal permission. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the consent of the user. Our newsletter also contains information about our services and us.

Double-Opt-In and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else’s e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Registration data: In order to register for the newsletter, it is sufficient if you enter your e-mail address. Optionally, we ask you to enter a name so that we can address you personally in the newsletter.

The sending of the newsletter and the measurement of success associated with it are based on the consent of the recipient acc. Art. 6 Para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 Para. 2 No. 3 UWG or on the basis of the legal permission acc. § 7 Para. 3 UWG.

The registration process is logged on the basis of our legitimate interests in accordance with Art. Art. 6 Para. 1 lit. f GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system that serves our business interests as well as meets user expectations and also allows us to prove consent.

Termination/Revocation – You can terminate the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We can store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the newsletter in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.

Newsletter – delivery service provider

The newsletter is sent using the mail service provider MailPoet – a product of Wysija SARL, 6 rue Dieudé, 13006, Marseille, FRANCE. You can view the data protection regulations of the shipping service provider here: https://www.mailpoet.com/privacy-notice/. The shipping service provider is based on our legitimate interests acc. Art. 6 Para. 1 lit. f DSGVO and an order processing contract acc. Art. 28 Para. 3 sentence 1 GDPR.

The mailing service provider MailPoet can use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them themselves or to pass the data on to third parties.

Newsletter – measurement of success

The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, are initially collected.

This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor, if used, that of the shipping service provider to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

7. What rights do buyers have with regard to the use of their personal data and their contact details

Your Rights

If you reside in certain regions, including the EU, you have a number of rights in relation to your personal information. Some of these rights are general and others are specific. These rights are described below:

  • Access: You may have the right to access and receive a copy of the personal information I hold about you by writing to me using the contact information below.
  • Modification, Restriction, Deletion: You may also have the right to modify your personal information, limit my use of that information, or delete it. Except in exceptional circumstances (such as when I need to store data for legal reasons), I will generally delete your personal data upon request.
  • Objection: You can object anytime 1. that I process some of your data in relation to my legitimate interests and 2. that you will receive marketing messages from me after you have previously expressly consented to this. In such cases, I will delete your personal data unless I can demonstrate compelling legitimate grounds for its continued use or it is required for legal reasons.
  • Complaint: If you reside in the EU and wish to raise a concern about my use of your information – without prejudice to any other rights you may have – you have the right to raise these concerns with your local data protection authority. How to contact me
  • For the purposes of the EU General Data Protection Regulation, I, Angelo Silenzio, am the data controller of your personal data. If you have any questions or concerns, you can contact me at A.Silenzio@gmx.de. Alternatively you can write to me at the following address:

 

7. Reviews from Trustami

 

The Trustami seal of trust is integrated on this website to display the collected ratings and social media feedback. This serves to implement our legitimate interests in optimal marketing of our offer on our own website in accordance with Article 6 (1) sentence 1 lit. f GDPR. When the Trustami trust seal is called up, the web server automatically saves data (access data) in the form of a server log file that contains the name of the accessed website, the file, the date and time of access, your IP address in abbreviated form, the amount of data transferred , which contains a message about a successful retrieval, the browser type, the user’s operating system, the referrer URL (of the previously visited page) and the requesting provider. This access data is not evaluated and automatically overwritten no later than seven days after the end of your visit to the site. The Trustami seal of trust and the services advertised with it are an offer from Trustami GmbH, Bamberger Straße 40, 10779 Berlin. The Trustami data protection declaration at www.trustami.com/datenschutz applies to the processing of the data collected by Trustami.

 

 

Angelo Silenzio

Meggendorferstrasse 23

80992 Munich

Germany