1) Information about the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Patrick Agbadizu, Lovelique Beauty Shop, Oldenburger Straße 47, 10551 Berlin, Germany, Tel .: + (49) 3064469880, email: info @ lovelique. de. The person responsible for the processing of personal data is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the string "https: //" and the lock symbol in your browser line.

2) Data collection when visiting our website

When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source / reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if necessary: ​​in anonymous form)

Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are specific indications of illegal use.

3) Hosting

Hosting through Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of a Processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data can also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the event of data being transmitted to Shopify Inc. in Canada, the adequacy decision of the European Commission guarantees the appropriate level of data protection.
Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned by Shopify only takes place within the framework specified below.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable you to recognize your browser the next time you visit (so-called persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either to implement the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of a given consent or according to Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

Please note that you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies- allow-and-reject
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/ mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that the functionality of our website may be restricted if cookies are not accepted.

5) Contact us

When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case if the circumstances indicate

6) Data processing when opening a customer account and for contract processing

According to Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deleting your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the person responsible. We save and use the data you provide for contract processing. After completion of the contract or deletion of your customer account, your data will be blocked with due regard to tax and commercial law retention periods and deleted after these deadlines,

7) Use of customer data for direct advertising

7.1 Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular e-mail offers for goods or services from our range that are similar to those already purchased. We do not have to obtain any separate consent from you for this in accordance with Section 7 (3) UWG. In this respect, data processing takes place solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you an email. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with future effect by notifying the person responsible at the beginning. For this, you only incur transmission costs according to the basic tariffs. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

 

7.2 Newsletter dispatch via Shopify Email

Our e-mail newsletter is sent via Shopify Email, a service of Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), to which we send yours Pass on data provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in the use of an advertising-effective, secure and user-friendly newsletter system. The data you enter for newsletter subscription (e.g. email address) is generally stored on Shopify's servers in the EU.
As part of the aforementioned Shopify services, data can also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event of data being transmitted to Shopify Inc. in Canada, the adequacy decision of the European Commission guarantees the appropriate level of data protection. Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. and Shopify (USA) Inc. in the USA are certified for the us-European data protection convention "Privacy Shield", which ensures compliance with the data protection level applicable in the EU guaranteed.

Shopify uses this information to send and statistically evaluate the newsletter on our behalf. For the evaluation, the emails sent can contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. In this way it can be determined whether a newsletter message has been opened and which links have been clicked on. In addition, technical information is recorded (e.g. time of access, IP address, browser type and operating system). The data is only collected in a pseudonymized form and is not linked to your other personal data; direct personal reference is excluded. This data is used only for statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients. If you want to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

Furthermore, Shopify can process this data in accordance with Art. 6 Para. 1 lit. f Use the GDPR itself based on its own legitimate interest in the needs-based design and optimization of the service and for market research purposes, for example to determine which countries the recipients come from. However, Shopify does not use the data of our newsletter recipients to write to them themselves or to pass the data on to third parties.

We have concluded an order processing contract with Shopify, with which we oblige Shopify to protect our customers' data and not to pass them on to third parties.

You can view Shopify's privacy policy here: https://www.shopify.de/legal/datenschutz

7.3 E-mail advertising with registration to the Newsletter
If you register for our newsletter, we will use the necessary or data provided separately by you, to send you our e-mail newsletter on a regular basis based on your consent according to Art. 6 paragraph 1 sentence 1 lit. a DSGVO. The cancellation of the newsletter is possible at any time. and can be done either by sending a message to the contact option described below or by using a dedicated link in the newsletter. After unsubscription we will delete your e-mail address, as far as you have not expressly consented to further use of your data or if we have further use of data which is permitted by law and which has been which we inform you of in this statement."

7.4  Goods availability notification via email

If we offer the option in our online shop for selected, temporarily unavailable items to inform you by email about the time of availability, you can register for our email notification service for the availability of goods. When you register for our e-mail notification service for the availability of goods, we will send you a one-time e-mail message about the availability of the item you have selected. All that is required for sending this notification is your email address. The provision of further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure to send this notification. This means, that we will only send you a corresponding notification if you have expressly confirmed to us that you consent to receiving such a message. We will then send you a confirmation email asking you to click the appropriate link to confirm that you want to receive such notification.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When registering for our e-mail notification service for the availability of goods, we save your IP address entered by the Internet service provider (ISP) as well as the date and time of registration to prevent any possible misuse of your e-mail address at a later date to understand. The data we collect when you register for our e-mail notification service regarding the availability of goods will only be used for the purpose of informing you about the availability of a specific item in our online shop. You can unsubscribe from the e-mail notification service for goods availability at any time by sending a message to the person named above. After unsubscribing, your email address will be deleted from our mailing list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is permitted by law and about which we inform you in this declaration .

8) Data processing for order processing

8.1  In order to process your order, we work with the following service provider (s) who support us in whole or in part in the execution of contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as far as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of the payment processing, if this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly below. The legal basis for the transfer of the data is Art. 6 Para. 1 lit. b GDPR.

8.2  We work with external shipping partners to fulfill our contractual obligations towards our customers. We give your name and your delivery address and, if necessary for the delivery, your telephone number, only for the purposes of the delivery of goods Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.

8.3  Use of special service providers for order processing and processing

- Oberlo Orders
are processed using the “Oberlo” dropshipping tool, a service of Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Name, address and, if applicable, other personal data are stored in accordance with Art. 6 Para. 1 lit. b GDPR passed on to the respective shipping partner / supplier on our behalf exclusively for the purpose of delivering goods via Oberlo. Your data will only be passed on to the extent that this is actually necessary for the processing of the order.
We have concluded an order processing contract with Oberlo, with which we oblige Oberlo to protect our customers' data and not to pass them on to third parties.
If you are interested, this contract can be viewed at the following Internet address : https://www.oberlo.de/oberlo-data-processing-addendum - Shopify Digital Download
The order is processed via the "Digital Downloads" service from Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Mail address and, if applicable, first and last name of the customer 6 GDPR will only be passed on to Shopify for the processing of online orders in accordance with Art. 6 Para. 1 GDPR. Your data will only be passed on to the extent that this is actually necessary for processing the order. Details on data protection and the data protection declaration of Shopify can be viewed on the website at https://www.shopify.de/legal/datenschutz.

8.4  Use of payment service providers (payment services)

-PayPal

If you pay via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we will give your payment details as part of the payment processing to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment details may be processed in accordance with Art. 6 Para. 1 lit. f GDPR passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical process. Address data is used, among other things, but not exclusively, to calculate the score values. For more information on data protection law, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorized to process your personal data if this is necessary for the contractual payment processing.

- Shopify Payments

We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment is processed by the technical service provider Stripe Payments Europe Ltd. , 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we provided the information you provided in the course of the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) according to Art. 6 Para. 1 lit. b Pass on GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this.

Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy.

 

9) Use of rating and test seal graphics

Trusted Shops Trustbadge

To display our Trusted Shops seal of approval and to offer the Trusted Shops membership for buyers after placing an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to safeguard our legitimate interests in an optimal marketing of our offer, which predominate in the context of a balancing of interests, Art. 6 Para. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str.15C, 50823 Cologne.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.

Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

10) Use of social media: social plugins

10.1  Facebook plugins with Shariff solution

Our website uses so-called social plugins ("plugins") from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook").

In order to increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but are only integrated into the page using an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, a connection to the Facebook servers is not yet established. If you click the button, a new browser window opens and calls up the Facebook page, where you can interact with the plugins there (if necessary after entering your login data).

For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, please refer to Facebook's data protection information: https://www.facebook.com/policy.php

10.2  Instagram plugin as a Shariff solution

Our website uses so-called social plugins (“plugins”) from the online service Instagram, which is operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).

In order to increase the protection of your data when you visit our website, these buttons are not unrestrictedly integrated as plugins, but only by using an HTML link in the page. This type of integration ensures that when you visit a page on our website that contains such buttons, a connection to the Instagram servers is not yet established. When you click the button, a new browser window opens and opens the Instagram page, where you can interact with the plugins there (if necessary after entering your login data).
Instagram LLC. based in the USA is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights in this regard and setting options for protecting your privacy can be found in Instagram's data protection information: https://help.instagram.com/155833707900388/

10.3  Pinterest plugin as a Shariff solution

The seller uses so-called social plugins (“plugins”) from the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).

In order to increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but are only integrated into the page using an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, a connection to the Pinterest servers is not yet established. If you click the button, a new browser window opens and opens the Pinterest page, where you can interact with the plugins there (if necessary after entering your login data).

In the event of the transfer of personal data to Pinterest Inc. based in the USA, Pinterest Inc. has certified itself for the US-European data protection convention “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

The purpose and scope of the data collection and the further processing and use of the data by Pinterest as well as your rights in this regard and setting options for protecting your privacy can be found in Pinterest's data protection information: https://about.pinterest.com/de/privacy-policy

11) Online marketing

Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform from the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to serve ads relevant to users, to improve reports on campaign performance, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 Para. 1 lit. f GDPR. In addition, GMP can use cookie IDs to record conversions related to ad requests. This is the case, for example, if a user sees a GMP ad and later visits the advertiser's website when using the same browser and buys something via this website. According to Google, GMP cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge as follows: By integrating GMP, Google receives the information that you are using the corresponding part of our website Accessed the website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address. As part of the use of GMP, personal data may also be transmitted to the servers of Google LLC. come in the US.

If you want to object to participation in this tracking process, you can deactivate cookies for conversion tracking by setting your browser so that cookies from the domain www.googleadservices.com are blocked (see https: // www. google.de/settings/ads), whereby this setting will be deleted if you deactivate your cookies. Alternatively, you can find out about the setting of cookies from the Digital Advertising Alliance at www.aboutads.info and make your desired settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.

In the event of the transfer of personal data to Google LLC. based in the United States, Google LLC. certified for the us-European data protection convention "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

You can find more information about the data protection regulations of GMP by Google at the following Internet address: https://www.google.de/policies/privacy/

As far as legally required, we have given your consent to the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR obtained. You can revoke your consent at any time with future effect. To exercise your revocation, please follow the above-mentioned option to object.

12) Retargeting / Remarketing / referral advertising

Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, we hereby advertise this website in the Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and on the basis of the pages you visit. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 Para. 1 lit. f GDPR.
Any further data processing will only take place if you have agreed with Google that your internet and app browser history will be linked to your Google account by Google and that information from your Google account will be used to personalize the advertisements that they display on the web consider. If you are logged into Google in this case while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google temporarily links your personal data to Google Analytics data to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. come in the US.
You can permanently deactivate the setting of cookies for advertising requirements by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can contact Digital Inform Advertising Alliance at www.aboutads.info about the setting of cookies and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.
In the event of the transfer of personal data to Google LLC. based in the United States, Google LLC. certified for the us-European data protection convention "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
Further information and the data protection regulations regarding advertising and Google can be viewed here:
https://www.google.com/policies/technologies/ads/
As far as legally required, we have given your consent to the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR obtained. You can revoke your consent at any time with future effect. To exercise your revocation, please follow the above-mentioned option to object.

13) Tools and other

13.1  Google Customer Reviews (formerly Google Trusted Stores program)

We work with Google as part of the Google Customer Reviews program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to get customer reviews from users of our website. After a purchase on our website, you will be asked whether you would like to take part in an email survey from Google. If you give your consent in accordance with Art. 6 Para. 1 lit. a GDPR, we transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the buying experience on our website. The rating you submit will then be combined with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google seller ratings. As part of the use of Google customer reviews, personal data may also be transmitted to the servers of Google LLC. come in the US.

You can revoke your consent at any time by sending a message to the person responsible for data processing or to Google.

In the event of the transfer of personal data to Google LLC. based in the United States, Google LLC. certified for the us-European data protection convention "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

You can find more information about Google's data protection in connection with the Google Customer Reviews program at the following link: https://support.google.com/merchants/answer/7188525?hl=de

You can read more about data protection from Google seller ratings at this link: https://support.google.com/google-ads/answer/2375474

13.2  Shopsync for Shopify

This website uses the Shopify app "Shopsync" from ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
With the help of ShopSync, the newsletter service "Mailchimp" is synchronized with our Shopify account in such a way that updates in e-mail lists from Mailchimp (such as a successful opt-out of a newsletter recipient) are also automatically stored on Shopify and, on the other hand New contact data generated on contracts with Shopify are automatically transferred to Mailchimp's email lists.

In the former case, data is processed in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the effective and cross-system maintenance of the files of addressees and the efficient consideration of legally significant changes in status.

In the second case, only on the basis of the user's express consent in accordance with Art. 6 Para. a DSGVO after conclusion of a contract on Shopify for inclusion in the Mailchimp list, its first and last name, address and email address together with transaction-related information (purchase amount, time and date of purchase) transmitted to Mailchimp by ShopSync.

ShopSync does not save or store data transmitted in this way after synchronization. All information synchronized between Shopify and Mailchimp is transmitted using SSL (Secure Socket Layer) technology, and all transmitted information remains encrypted during the synchronization process.

The synchronization process requires the transfer of information over a secure connection to servers hosted by Amazon Web Services in the United States. Amazon Web Services, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4

Further data protection information on ShopSync can be found here: https://shopsync.io/privacy-policy

14) Rights of the data subject

14.1 The applicable data protection law grants you comprehensive data protection rights (information and intervention rights) to the person responsible with regard to the processing of your personal data, about which we will inform you below:

  • Right to information according to Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned Storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if we have not collected it from you, that Existence of automated decision-making including profiling and, if necessary meaningful information about the logic involved and the scope that affects you and the intended effects of such processing, as well as your right to be informed about the guarantees under Art. 46 GDPR if your data is forwarded to third countries;
  • Right to correction in accordance with Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and / or completion of your incomplete data stored by us;
  • Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the correctness of your data, which you disputed, is checked, if you reject the deletion of your data due to inadmissible data processing and instead the Request restriction of the processing of your data if you need your data to assert, exercise or defend legal claims, after we no longer need this data after the purpose has been achieved or if you have objected for reasons of your special situation, as long as it is not certain whether our legitimate Reasons outweigh;
  • Right to information in accordance with Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to correct or delete the data to all recipients to whom your personal data have been disclosed Notify processing restrictions unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible, insofar as this is technically feasible;
  • Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal;
  • Right to lodge a complaint in accordance with Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the, without prejudice to any other administrative or judicial remedy Member State of your whereabouts, your place of work or the place of the alleged violation.

14.2  RIGHT TO OBJECT

When we process your personal data on the basis of our principle of interested legal interest, you have the right to make this for any right reason for your specific situation.
If you exercise your right to object, we will stop processing the data concerned. Further processing is reserved without notice if we can provide obligatory protected reasons for the processing, which exercise your interests, fundamental rights and fundamental properties, or if the processing, publicity, publicity.

If your personal data is processed by us to operate direct advertisement, you have the right to object at any time to process personal data for the purpose of such advertising. you can exercise the contradiction as described above.

If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes or as newsletters..


15) Duration of storage of personal data

The duration of the storage of personal data is measured on the basis of the respective legal basis, the purpose of processing and - if relevant - also on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data based on an express consent in accordance with Art. 6 Para. 1 lit. a DSGVO, this data is stored until the data subject withdraws their consent.

Are there statutory retention periods for data that is part of legal or similar legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR are processed, this data will be routinely deleted after the retention periods have expired, provided that they are no longer required to fulfill or initiate a contract and / or we do not have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the data subject exercises his right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises his right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.