Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies unless otherwise stated in the processing operations described below.

“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.

Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.

The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer.

Your data may be transferred to and processed in third countries outside the EU, particularly in Canada and the United States. An adequacy decision by the European Commission exists for Canada. For the United States, an adequacy decision by the European Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the standard contractual clauses of the European Commission.

Contact

Data Controller

Please contact us if you wish. The data controller responsible for data processing is:

Mamadou Aliou Diallo
Horneburg 37
44869 Bochum
Germany
Phone: 015739652604
Email: mdiallo1983mamadou@gmail.com

Unsolicited Contact by the Customer via Email

If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.

If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR.

We will only use your email address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of making contact.

We will only use your email address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Use of Google Maps API Address Validation

We use address validation provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) on our website.

The data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors and, where applicable, supplementing missing data. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there, and analysed.

Among other things, the following information may be transmitted to Google and processed there: postal addresses (country, city, postcode, street, house number), email address, and telephone number.

Your data may also be transferred to the United States. For the United States, an adequacy decision by the European Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore committed to complying with European data protection principles.

The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in maintaining a correct data basis for fulfilling our contractual obligations. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

The data is processed separately by the provider and is not merged with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.

Further information on Google’s terms of use and privacy can be found at:
https://cloud.google.com/maps-platform/terms
and
https://policies.google.com/privacy

Collection and Processing When Uploading Images

We provide an upload function for image files on our website. This gives you the opportunity to send us images via encrypted data transmission. By submitting your images, we may collect your personal data (images of identifiable persons) only to the extent provided by you.

The data processing serves the purpose of creating personalised products. The submitted image serves as a template for the product and is used for this purpose (e.g. T-shirt printing). The processing is carried out on the basis of Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be passed on to service providers used by us as part of order processing. No data will be passed on to other third parties.

We use the image submitted by you only for the purpose of providing the service. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer Account and Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent.

You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your customer account will then be deleted.

Collection, Processing and Disclosure of Personal Data in Orders

When placing an order, we collect and process your personal data only insofar as this is necessary for the fulfilment and handling of your order and for processing your enquiries. The provision of the data is required for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transfer is limited to a minimum.

Reviews

Data Collection When Posting a Comment or Review

When commenting on or reviewing an item or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling comments/reviews to be posted and displayed.

By submitting the comment/review, you consent to the processing of the transmitted data. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your personal data will then be deleted.

When your comment/review is published, only the name you provided will be published.

Use of Judge.me

We use the review system “Judge.me” provided by Judge.me Ltd, c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB.

Judge.me enables us to collect customer reviews and display them on our website in order to provide you with insight into the quality of our services.

After an order, you may receive an invitation from us or Judge.me to submit a review and subsequently leave a review. In doing so, the following data may be processed by us or Judge.me: email address, name, telephone number, address, information about your device (IP address, information about your web browser and operating system), information about the purchased product or service used (order number, product details), the content of your review and the star rating you gave, as well as your product photos or videos (if you attached them to your product review). This data may also be used to verify your review.

Judge.me uses technologies such as cookies.

Your data may be transferred outside the EU to the United Kingdom. An adequacy decision by the European Commission exists for the United Kingdom.

Your data may also be transferred to the United States. For the United States, an adequacy decision by the European Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer takes place on the basis of specific contracts approved for use in the United Kingdom which provide the same protection as personal data has in the United Kingdom.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR, provided that you have expressly consented to the transfer of your data and to receiving the review request. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Further information on privacy when using Judge.me can be found at:
https://judge.me/privacy

Payment Service Providers

Use of PayPal

We use the payment service PayPal provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The data processing serves the purpose of being able to offer you payment via the payment service.

By selecting and using PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Policy, which can be found at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the payment service PayPal Plus provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

By selecting and using payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

For individual payment methods such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies where applicable. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation may include address data, among other things.

Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit checking for contract initiation. The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default where PayPal makes advance payments.

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying PayPal. The provision of the data is required for the conclusion of the contract with the payment method requested by you. Failure to provide it means that the contract cannot be concluded with the payment method you selected.

Use of PayPal Express

We use the payment service PayPal Express provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

In order to integrate this payment service, it is necessary for PayPal to collect, store, and analyse data when the website is accessed (e.g. IP address, device type, operating system, browser type, location of your device). Cookies may also be used for this purpose. The cookies enable your browser to be recognised.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Further information on data processing when using the PayPal Express payment service can be found in the related privacy policy at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS

Use of PayPal Check-Out

We use the payment service PayPal Check-Out provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Cookies may be stored which enable your browser to be recognised. The resulting data processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you.

Credit Card via PayPal, Direct Debit via PayPal and “Pay Later” via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies where applicable. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation may include address data, among other things.

Third-Party Providers

When paying using a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Article 6(1)(b) GDPR. To carry out this payment method, the data may then be forwarded by PayPal to the respective provider. This processing is carried out on the basis of Article 6(1)(b) GDPR. Local third-party providers may include, for example:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on Invoice via PayPal

When paying by invoice, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then forwarded by PayPal to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany, in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Ratepay may carry out a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies in accordance with the procedure already described above. The data processing serves the purpose of credit checking for contract initiation. The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default where Ratepay makes advance payments.

Further information on data protection and the credit agencies used by Ratepay can be found at:
https://www.ratepay.com/legal-payment-dataprivacy/
https://www.ratepay.com/legal-payment-creditagencies/

Further information on data processing when using PayPal can be found in the related privacy policy at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of the Payment Service Provider Stripe

We use the payment service Stripe provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using Stripe, the data required for payment processing is transmitted to Stripe in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Stripe reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies where applicable. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation may include address data, among other things.

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying Stripe. The provision of the data is required for the conclusion of the contract with the payment method requested by you. Failure to provide it means that the contract cannot be concluded with the payment method you selected.

All Stripe transactions are subject to the Stripe Privacy Policy, which can be found at:
https://stripe.com/de/privacy

Use of the Payment Service Provider Mollie

We use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands, for payment processing on our website.

The data processing serves the purpose of being able to offer you various payment methods via the payment service provider Mollie. If you choose one of Mollie’s payment options, the data required for payment processing is transmitted to Mollie. This includes your payment data (for example bank account number or credit card number), your IP address, your internet browser and device type, and in some cases your first and last name, your address details, and information about the product or service you purchased from us.

This data processing is carried out on the basis of Article 6(1)(b) GDPR.

Further information on data processing when using Mollie can be found in the related privacy policy:
https://www.mollie.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to use all functions of this website to their full extent.

You can find information on how to manage cookies in the major browsers, including how to disable them, at the following links:

Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated below in this privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised again after a page change.

The use of cookies or comparable technologies is carried out on the basis of Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Use of the Cookie Consent Manager CCM19

We use the cookie consent manager CCM19 provided by HB legal tech GmbH, Kohlgartenstraße 11-13, 04315 Leipzig, Germany, on our website as part of order processing.

The plug-in is hosted on consenttool.haendlerbund.de and enables you to grant consent to data processing via the website, in particular the setting of cookies, and to exercise your right of withdrawal for consents already granted.

The data processing serves the purpose of obtaining and documenting the necessary consents to data processing and thus complying with legal obligations.

Cookies are used for this purpose. Among other things, the following information may be collected, stored, and, where applicable, transmitted to HB legal tech GmbH: randomly assigned ID, consent status, date and time of consent/refusal. The data is stored for 1 year and 1 month and then deleted. This data is not passed on to other third parties.

The data processing is carried out in order to fulfil a legal obligation on the basis of Article 6(1)(c) GDPR.

Further information on data protection can be found at:
https://www.haendlerbund.de/de/datenschutzerklaerung

Rights of Data Subjects and Storage Period

Storage Duration

After the contract has been fully processed, the data is initially stored for the duration of the warranty period and then, taking into account statutory retention periods, in particular under tax and commercial law, deleted after expiry of the period unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, and right to data portability.

In addition, under Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to Lodge a Complaint with the Supervisory Authority

Under Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be contacted at:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Germany
Phone: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de

Right to Object

If the personal data processing listed here is based on our legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to this processing with effect for the future.

Once an objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defence of legal claims.

Last updated: 22 October 2024