Privacy Policy

Das ist ein längerer Datenschutzerklärungstext. Aufgrund der Längenbegrenzung kann ich ihn nicht vollständig in einer einzigen Antwort übersetzen.

Ich kann ihn jedoch vollständig und juristisch präzise ins Englische übersetzen. Hier ist der erste Teil:

Privacy Policy

1. Access Data and Hosting

2. Data Processing for Contract Performance and Contact Requests

2.1 Data Processing for Contract Performance

2.2 Customer Account

2.3 Contacting Us

2.4 Data Processing for Appointment Bookings / Reservations

3. Data Processing for Shipping

Disclosure of Data to Shipping Service Providers for Delivery Notifications

4. Data Processing for Payment Processing

4.1 Data Processing for Transaction Processing

4.2 Data Processing for Fraud Prevention and the Optimization of Our Payment Processes

5. Email Marketing

5.1 Email Newsletter with Subscription and Newsletter Tracking Based on Separate Consent

5.2 Sending Review Requests by Email

6. Cookies and Other Technologies

6.1 General Information

6.2 Use of the Usercentrics Consent Management Platform for Managing Consent

7. Use of Cookies and Other Technologies

Use of Google Services

8. Integration of the Trusted Shops Trustbadge / Other Widgets

8.1 Data Processing When Integrating the Trustbadge / Other Widgets

8.2 Data Processing After Order Completion

9. Social Media

9.1 Social Buttons by Facebook (Meta), Instagram (Meta), and WhatsApp

9.2 Our Online Presence on Facebook (Meta) and Instagram (Meta)

10. Contact Options and Your Rights

10.1 Your Rights

10.2 Contact Options

Controller Responsible for Data Processing

Jack Didis
Lohmühlental 76
45307 Essen
Germany

Email: info@filamenthaus.de

Phone: +49 155 60224207

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we process your personal data.

1. Access Data and Hosting

You may visit our website without providing any personal information. Whenever you access a webpage, the web server automatically stores a so-called server log file containing information such as the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access.

These access data are evaluated exclusively for the purpose of ensuring the smooth operation of the website and improving our services. This serves to safeguard our legitimate interests in the proper presentation of our website in accordance with Article 6(1)(f) GDPR, following a balancing of interests. All access data are processed only for as long as necessary to achieve the above-mentioned processing purposes.

The services for hosting and displaying the website are partly provided by our service providers acting on our behalf as data processors. Unless otherwise stated in this Privacy Policy, all access data and all data collected through designated forms on this website are processed on their servers. If you have any questions regarding our service providers or the legal basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

Our service providers are located in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection:

Brazil
Israel
United Kingdom
United States

The adequacy decision for the United States applies as the legal basis for transfers to third countries provided that the respective service provider is certified. Such certification is in place.

Our service providers are also located in and/or use servers in the following countries:

Mexico
India
Ukraine

No adequacy decision has been adopted by the European Commission for these countries. Our cooperation with these providers is based on the following safeguards:

Standard Contractual Clauses (SCCs) of the European Union.

2. Data Processing for Contract Performance and Contact Requests

2.1 Data Processing for Contract Performance

For the purpose of fulfilling the contract (including handling inquiries and processing any claims arising from statutory warranty rights, contractual performance issues, withdrawal rights, and any statutory update obligations) pursuant to Article 6(1)(b) GDPR, we collect personal data that you voluntarily provide when placing an order.

Mandatory fields are marked as such because we require this information to process the contract. Without this information, we are unable to process and ship your order. The specific data collected can be seen in the respective input forms.

Further information on the processing of your data, particularly regarding the transfer of data to our service providers for order processing, payment processing, and shipping, can be found in the following sections of this Privacy Policy.

After the contract has been fully performed, your data will be restricted from further processing and deleted after the expiration of the applicable tax and commercial law retention periods pursuant to Article 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this where permitted by law and as explained in this Privacy Policy.

2.2 Customer Account

If you have given your consent pursuant to Article 6(1)(a) GDPR by choosing to create a customer account, we will use your data for the purpose of creating your customer account and storing your information for future orders placed through our website.

You may delete your customer account at any time by contacting us using the contact details provided in this Privacy Policy or by using the dedicated account deletion function available within your customer account.

Once your customer account has been deleted, your personal data will also be deleted unless you have expressly consented to the further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this where permitted by law and as explained in this Privacy Policy.

2.3 Contacting Us

As part of our customer communications, we collect personal data to process your inquiries pursuant to Article 6(1)(b) GDPR when you voluntarily provide such information by contacting us (e.g., via our contact form, live chat, or email).

Mandatory fields are marked accordingly, as we require this information to process your inquiry. The specific data collected can be seen in the respective input forms.

Once your inquiry has been fully processed, your data will be deleted unless you have expressly consented to the further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this where permitted by law and as explained in this Privacy Policy.

2.4 Data Processing for Appointment Bookings / Reservations

We collect personal data that you voluntarily provide when booking an appointment or making a reservation.

Mandatory fields are marked accordingly, as we require this information to process your appointment booking or reservation. Without the required information, we cannot process your booking or reservation. The specific data collected can be seen in the respective input forms.

Information entered into free-text fields is voluntary and is not required to complete your appointment booking or reservation. We kindly ask you not to include any sensitive personal data (such as health-related information, including medical conditions) in these free-text fields.

We use the data you provide for the purpose of processing your appointment booking or reservation pursuant to Article 6(1)(b) GDPR.

Once the booked appointment or reservation has been fully completed, your data will be restricted from further processing and deleted after the expiration of any applicable tax and commercial law retention periods pursuant to Article 6(1)(c) GDPR, unless you have expressly consented to the further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this where permitted by law and as explained in this Privacy Policy.

3. Data Processing for Shipping

For the purpose of fulfilling the contract pursuant to Article 6(1)(b) GDPR, we share your personal data with the shipping service provider responsible for delivering your order, to the extent necessary for the delivery of the goods you have ordered.

If you have any questions regarding our service providers or the legal basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

Disclosure of Data to Shipping Service Providers for Delivery Notifications

If you have given us your explicit consent during or after placing your order, we will, on the basis of your consent pursuant to Article 6(1)(a) GDPR, provide your email address and telephone number to the selected shipping service provider so that they can contact you prior to delivery for the purpose of providing a delivery notification or coordinating the delivery.

You may withdraw your consent at any time by contacting us using the contact details provided in this Privacy Policy.

Upon withdrawal of your consent, we will delete the data provided for this purpose unless you have expressly consented to the further use of your data or we reserve the right to use your data beyond this where permitted by law and as explained in this Privacy Policy.

If you have any questions regarding our service providers or the legal basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

4. Data Processing for Payment Processing

To process payments in our online shop, we work with the following partners: technical service providers, financial institutions, and payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the payment method you select, we transfer the data required to process the payment transaction to our technical service providers, the financial institution responsible for processing the payment, or the selected payment service provider, insofar as this is necessary to complete the payment. This processing is carried out for the performance of the contract pursuant to Article 6(1)(b) GDPR.

In some cases, the payment service providers collect the data required for processing the payment themselves, for example through their own website or via a technical integration within the checkout process. In such cases, the privacy policy of the respective payment service provider applies.

Depending on the selected payment method, personal data may be transferred to third countries outside the EU/EEA for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection.

Where personal data are transferred to third countries outside the EU/EEA for which no adequacy decision has been adopted by the European Commission, such transfers are based on the European Commission's Standard Contractual Clauses (SCCs).

If you have any questions regarding our payment processing partners or the legal basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

4.2 Data Processing for Fraud Prevention and the Optimization of Our Payment Processes

Where appropriate, we may provide the above-mentioned service providers with additional data, which they use together with the information required for payment processing for the purposes of fraud prevention and the optimization of our payment processes (e.g., invoicing, handling disputed payments, and accounting support).

This processing is carried out pursuant to Article 6(1)(f) GDPR in order to safeguard our legitimate interests, which, following a balancing of interests, prevail in protecting our business against fraud and ensuring efficient payment management.

5. Email Marketing

5.1 Email Newsletter with Subscription and Newsletter Tracking Based on Separate Consent

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter on a regular basis based on your consent pursuant to Article 6(1)(a) GDPR.

You may unsubscribe from the newsletter at any time by contacting us using the contact details provided below or by clicking the unsubscribe link included in every newsletter.

After you unsubscribe, we will remove your email address from our mailing list unless you have expressly consented to the further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this where permitted by law and as explained in this Privacy Policy.

If you have additionally given your consent pursuant to Article 6(1)(a) GDPR to the analysis of our newsletters, we will also analyze how you interact with our newsletters by measuring, storing, and evaluating open rates and click-through rates for the purpose of improving future newsletter campaigns ("Newsletter Tracking").

For this purpose, the emails we send contain one-pixel technologies (e.g., web beacons or tracking pixels) that are hosted on our website. For these analyses, we may link the following newsletter-related data in particular:

the website from which the page was accessed (referrer URL);
the date and time of access;
the type and version of the web browser used;
the IP address of the requesting device;
your email address;
the date and time of your subscription and confirmation;
one-pixel technologies together with your email address, IP address, and, where applicable, a unique identifier.

Links contained in the newsletter may also include this unique identifier.

You may withdraw your consent to Newsletter Tracking at any time by contacting us using the contact details provided in this Privacy Policy or by clicking the corresponding link included in the newsletter.

The relevant information will be stored for as long as you remain subscribed to the newsletter.

Our service providers are located in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection:

Brazil
Israel
United Kingdom
United States

The adequacy decision for the United States serves as the legal basis for transfers of personal data to the United States, provided that the respective service provider is certified. Such certification is in place.

Our service providers are also located in and/or use servers in the following countries:

Mexico
India
Ukraine

No adequacy decision has been adopted by the European Commission for these countries. Our cooperation with these service providers is based on the European Commission's Standard Contractual Clauses (SCCs).

5.2 Sending Review Requests by Email

If you have given us your explicit consent during or after placing your order pursuant to Article 6(1)(a) GDPR, we will use your email address to send you a request to review your order via the review system we use.

You may withdraw your consent at any time by contacting us using the contact details provided in this Privacy Policy or by clicking the unsubscribe link included in the review request.

After you withdraw your consent, we will remove your email address from the relevant mailing list unless you have expressly consented to the further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this where permitted by law and as explained in this Privacy Policy.

Review requests may also be sent by our service provider:

Trusted Shops SE
Subbelrather Str. 15C
50823 Cologne
Germany
("Trusted Shops")

In connection with the sending of review requests, we receive status information from Trusted Shops (e.g., whether the review request has been sent and whether it has been successfully delivered). This processing is carried out pursuant to Article 6(1)(f) GDPR in order to safeguard our legitimate interest in obtaining information about review invitations for the purpose of optimizing our processes, as well as the legitimate interest of Trusted Shops in providing this service.

For the sending of review requests and the collection and display of review and status information, we and Trusted Shops act as joint controllers within the meaning of the GDPR.

Within the framework of this joint controllership, we recommend that you contact Trusted Shops directly for any data protection inquiries or to exercise your rights. Their contact details can be found on the Trusted Shops website. Further information about data protection at Trusted Shops is also available on their website.

Regardless of the above, you may also contact us at any time using the contact details provided in this Privacy Policy. Where necessary, your request will be forwarded to the other controller for further handling.

6. Cookies and Other Technologies

6.1 General Information

To make your visit to our website more attractive and to enable the use of certain functions, we use various technologies, including so-called cookies, on different pages. Cookies are small text files that are automatically stored on your device.

Some of the cookies we use are deleted automatically at the end of your browser session, i.e., when you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit our website (persistent cookies). The storage duration of these cookies can be found in the cookie settings of your web browser.

Protection of Privacy on End Devices

When you use our online services, we employ technologies that are strictly necessary to provide the digital service you have expressly requested. The storage of information on your device or access to information already stored on your device does not require your consent for these essential technologies.

For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not provide your consent, certain parts of the website may not function properly or may not be fully available. Any consent you have provided will remain valid until you modify or reset the relevant settings on your device.

Subsequent Data Processing Through Cookies and Other Technologies

We use technologies that are strictly necessary for the operation of certain functions on our website (e.g., the shopping cart feature). These technologies collect and process your IP address, the time of your visit, device and browser information, as well as information about your use of our website (e.g., the contents of your shopping cart).

This processing is carried out pursuant to Article 6(1)(f) GDPR in order to safeguard our legitimate interests, which, following a balancing of interests, prevail in ensuring the optimized presentation and functionality of our website.

We also use technologies to comply with our legal obligations (e.g., to document and demonstrate your consent to the processing of personal data), as well as for web analytics and online marketing purposes.

Further information about these technologies, including the respective legal basis for the processing of personal data, can be found in the following sections of this Privacy Policy.

We may also use additional technologies that are not individually listed in this Privacy Policy. More detailed information about these technologies, including the applicable legal basis for processing, is available through the Usercentrics Consent Management Platform, which you can access by clicking the fingerprint icon located in the lower right or lower left corner of the website.

Cookie Settings

You can manage your browser's cookie settings using the following links:

Microsoft Edge™
Safari™
Chrome™
Firefox™
Opera™

If you have consented to the use of cookies and similar technologies pursuant to Article 6(1)(a) GDPR, you may withdraw your consent at any time by contacting us using the contact details provided in this Privacy Policy or by clicking the fingerprint icon located in the lower right or lower left corner of the website.

Please note that disabling cookies may limit the functionality of our website.

6.2 Use of the Usercentrics Consent Management Platform for Managing Consent

We use the Usercentrics Consent Management Platform ("Usercentrics") on our website to inform you about the cookies and other technologies we use and to obtain, manage, and document your legally required consent to the processing of your personal data by these technologies.

This processing is necessary pursuant to Article 6(1)(c) GDPR in order to comply with our legal obligation under Article 7(1) GDPR to demonstrate that valid consent has been obtained for the processing of personal data.

Usercentrics is a service provided by:

Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany

Usercentrics processes your data on our behalf as a data processor.

When you visit our website, the Usercentrics web server stores a server log file containing, among other things:

your anonymized IP address,
the date and time of your visit,
device and browser information, and
information regarding your consent preferences and decisions.

Your data will be deleted after three years, unless you have expressly consented to further processing pursuant to Article 6(1)(a) GDPR or we reserve the right to process your data beyond this where permitted by law and as explained in this Privacy Policy.

Our service providers are located in and/or use servers in the United States, for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection.

The adequacy decision for the United States serves as the legal basis for the transfer of personal data, provided that the respective service provider is certified. Such certification is in place.

7. Use of Cookies and Other Technologies

We use the following cookies and other technologies provided by third parties on our website. Unless otherwise stated for a particular technology, these technologies are used on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Once the respective purpose has ceased to exist and we no longer use the relevant technology, the data collected in this context will be deleted.

You may withdraw your consent at any time with effect for the future. Further information about your right to withdraw consent can be found in the section "Cookies and Other Technologies."

Additional information, including the legal basis of our cooperation with the individual providers, can be found in the descriptions of the respective technologies below.

If you have any questions regarding these providers or the legal basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

Use of Google Services

We use the technologies described below provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The information automatically collected by Google technologies regarding your use of our website is generally transferred to and stored on servers operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Unless otherwise specified for an individual technology, the processing of personal data is carried out on the basis of a joint controller agreement concluded with Google pursuant to Article 26 GDPR.

Further information on Google's processing of personal data can be found in Google's Privacy Policy.

Our service providers are located in and/or use servers in countries outside the EU/EEA for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection.

Our service providers also operate in countries outside the EU/EEA for which no adequacy decision has been adopted by the European Commission. In such cases, our cooperation is based on the European Commission's Standard Contractual Clauses (SCCs).

Google Analytics

For the purpose of website analytics, Google Analytics automatically collects and stores data, including your IP address, the date and time of your visit, device and browser information, and information about your use of our website. This information is used to create pseudonymous user profiles.

Cookies may be used for this purpose.

If you access our website from within the European Union, your IP address is initially processed on a server located within the EU for the purpose of determining your approximate location. It is then immediately deleted before the traffic is forwarded to Google's servers for further processing.

The processing is carried out on the basis of a data processing agreement concluded with Google.

To optimize the marketing of our website, we have enabled the Google Products & Services data-sharing settings. This allows Google to access data collected through Google Analytics and subsequently use it to improve Google's own services.

The sharing of data with Google under these settings is based on an additional agreement between joint controllers. We have no influence over Google's subsequent processing of the data.

To optimize our website, we also use the Google Analytics User-ID feature. This feature allows us to assign a unique, persistent identifier to interaction data collected across one or more sessions, enabling analysis of user behavior across multiple devices and sessions.

For web analytics, we also use the Google Signals feature of Google Analytics, which enables cross-device tracking.

If your internet-enabled devices are linked to your Google account and you have enabled the Personalized Ads setting in your Google account, Google may generate reports on your usage behavior, particularly regarding cross-device activity, even when you switch devices.

We do not process personal data in this context. We receive only aggregated statistical reports generated by Google Signals.

For web analytics and advertising purposes, Google Analytics also uses the DoubleClick cookie, which enables your browser to be recognized when you visit other websites. Google uses this information to compile reports on website activity and to provide additional services related to website usage.

If you do not provide your consent pursuant to Article 6(1)(a) GDPR for the use of Google Analytics, no cookies will be stored on or read from your device. The processing described above will not take place.

To compensate for gaps in website analytics through behavioral and conversion modeling, Google may receive pings containing certain technical data, including:

User-Agent information;
information about your consent status;
screen resolution;
IP address.

Google AdSense

Our website uses Google AdSense to display advertisements provided by third parties.

These advertisements are displayed in various locations throughout our website.

The DoubleClick cookie enables interest-based advertising by collecting and processing information such as:

IP address;
date and time of your visit;
device and browser information; and
information about your use of our website.

Google also assigns a pseudonymous user ID that allows interests to be inferred based on visits to this and other websites.

Google Ads

For advertising purposes in Google Search results and on third-party websites, a Google Remarketing cookie is placed when you visit our website.

This enables Google to display interest-based advertising by automatically collecting and processing:

your IP address;
the date and time of your visit;
device and browser information;
information about your use of our website; and
a pseudonymous cookie ID based on the pages you visit.

Further processing only takes place if you have enabled the Personalized Ads setting in your Google account.

If you are logged into your Google account while visiting our website, Google may combine your data with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analytics and event tracking, we use Google Ads Conversion Tracking to measure your subsequent behavior after you have accessed our website via a Google Ads advertisement.

Cookies may be used for this purpose, and data such as:

IP address;
date and time of your visit;
device and browser information; and
information about your interactions with our website (e.g., page visits or newsletter subscriptions)

may be collected to create pseudonymous usage profiles.

If you do not provide your consent pursuant to Article 6(1)(a) GDPR for the use of Google Ads, no cookies will be stored on or read from your device, and the processing described above will not take place.

To compensate for gaps in web analytics through behavioral and conversion modeling, Google may receive pings containing technical information such as:

User-Agent;
consent status;
screen resolution;
IP address;
page URL; and
advertisement click information contained in URL parameters.

Your IP address is used solely to determine the country from which the request originates.

Use of Wix Analytics for Website Analysis

For the purpose of website analytics, we use technologies provided by Wix Ltd., 40 Namal Street, Tel Aviv 6350671, Israel ("Wix").

Wix automatically collects and stores data including:

IP address;
date and time of your visit;
device and browser information;
location information; and
information about your use of our website.

This information is used to create pseudonymous user profiles. Cookies may also be used for this purpose.

These pseudonymous user profiles are not combined with personal data relating to the holder of the pseudonym without separate, explicit consent.

Wix processes this data on our behalf as a data processor.

Our service providers are located in and/or use servers in the following countries for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection:

Brazil
Israel
United Kingdom
United States

The adequacy decision for the United States serves as the legal basis for transfers of personal data provided that the respective service provider is certified. Such certification is in place.

Our service providers are also located in and/or use servers in the following countries:

Mexico
India
Ukraine

8. Integration of the Trusted Shops Trustbadge / Other Widgets

To display the services of Trusted Shops (e.g., the Trustmark, collected customer reviews) and to offer Trusted Shops products to buyers after an order has been placed, Trusted Shops widgets are integrated into our website.

This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in the optimal marketing of our services by enabling secure online shopping, pursuant to Article 6(1)(f) GDPR.

The Trustbadge and the services advertised through it are provided by:

Trusted Shops SE
Subbelrather Str. 15C
50823 Cologne
Germany
("Trusted Shops")

For the processing of personal data in connection with the Trustbadge, we and Trusted Shops act as joint controllers pursuant to Article 26 GDPR.

In accordance with Article 26(2) GDPR, we provide you below with the essential information regarding this joint controllership.

If you have any questions regarding data protection or wish to exercise your rights, we recommend that you contact Trusted Shops directly using the contact details provided in the Trusted Shops Privacy Policy.

However, you may also contact either controller at any time. Where necessary, your request will be forwarded to the other controller for further handling.

8.1 Data Processing When Integrating the Trustbadge / Other Widgets

The Trustbadge is delivered via a Content Delivery Network (CDN) operated by a service provider located in the United States.

An adequate level of data protection is ensured through the applicable adequacy decision of the European Commission for transfers of personal data to the United States.

Service providers located in the United States are generally certified under the EU–U.S. Data Privacy Framework (DPF).

Where a service provider is not certified under the DPF, the transfer of personal data is safeguarded through the use of the European Commission's Standard Contractual Clauses (SCCs).

When the Trustbadge is accessed, the web server automatically stores a server log file containing information such as:

your IP address;
the date and time of access;
the amount of data transferred; and
the requesting internet service provider (access data).

These access data are recorded solely for the purpose of documenting access.

Your IP address is anonymized immediately after collection, making it impossible to associate the stored data with you personally.

The anonymized data are used in particular for statistical analyses and error diagnostics.

8.2 Data Processing After Completion of an Order

After your order has been completed, the Trustbadge accesses order information stored on your device, including:

the order value;
the order number;
where applicable, the purchased product; and
your email address.

This is necessary to enable Trusted Shops to offer its services to you and, where applicable, to automatically provide buyer protection for your order.

For this purpose, your email address is transmitted to Trusted Shops in the form of a cryptographic one-way hash.

The legal basis for this processing is Article 6(1)(f) GDPR.

The purpose of this processing is to determine whether you are already registered for Trusted Shops services. This processing is necessary to safeguard the overriding legitimate interests of both us and Trusted Shops in providing buyer protection linked to your specific order and transaction-related review services pursuant to Article 6(1)(f) GDPR.

If you are already registered with Trusted Shops, any further processing will be carried out in accordance with the contractual agreement concluded between you and Trusted Shops.

If you are not yet registered, you will be given the opportunity to register for Trusted Shops services. Any subsequent processing after registration will likewise be governed by your contractual relationship with Trusted Shops.

If you choose not to register, all transmitted data will be automatically deleted by Trusted Shops and can no longer be linked to an identifiable individual.

Trusted Shops uses service providers for hosting, monitoring, and logging services.

The legal basis for this processing is Article 6(1)(f) GDPR for the purpose of ensuring the reliable and uninterrupted operation of its services.

Personal data may be processed in third countries, including:

United States
United Kingdom
Israel

For these countries, the European Commission has adopted adequacy decisions confirming an adequate level of data protection.

Service providers located in the United States are generally certified under the EU–U.S. Data Privacy Framework (DPF).

Where a service provider is not certified under the DPF, transfers are safeguarded by the European Commission's Standard Contractual Clauses (SCCs).

9. Social Media

9.1 Social Buttons for Facebook (by Meta), Instagram (by Meta), and WhatsApp

Our website uses social media buttons for various social networks. These buttons are integrated into our website solely as HTML links, meaning that no connection to the servers of the respective provider is established when you visit our website.

If you click one of these buttons, the website of the respective social network will open in a new browser window. There, you may, for example, use the Like or Share functions.

9.2 Our Online Presence on Facebook (by Meta) and Instagram (by Meta)

If you have given your consent to the respective social media provider pursuant to Article 6(1)(a) GDPR, your personal data will be automatically collected and stored when you visit our profiles on the social media platforms listed above for the purposes of market research and advertising.

Pseudonymous user profiles are created from this data and may be used, for example, to display advertisements both on and outside the respective platforms that are presumed to match your interests. Cookies are generally used for this purpose.

Detailed information about the processing and use of your personal data by the respective social media provider, as well as information about your rights, privacy settings, and available contact options, can be found in the privacy policies of the respective providers linked below.

If you require further assistance regarding data protection, you are welcome to contact us.

Facebook (by Meta)

Facebook is a service provided by:

Meta Platforms Ireland Limited
Block J, Serpentine Avenue
Dublin 4
Ireland

The information automatically collected by Meta Platforms Ireland regarding your use of our Facebook page is generally transferred to and stored on servers operated by:

Meta Platforms, Inc.
1601 Willow Road
Menlo Park, California 94025
United States

The processing of personal data in connection with visits to our Facebook Page is carried out on the basis of a joint controller agreement pursuant to Article 26 GDPR.

Further information, including details regarding Facebook Insights, can be found in Meta's privacy documentation.

Our service providers are located in and/or use servers in the following countries for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection:

Brazil
United States
Canada
Japan
South Korea
New Zealand
United Kingdom
Argentina

The adequacy decision for the United States serves as the legal basis for transfers of personal data provided that the respective service provider is certified. Such certification is in place.

Our service providers are also located in and/or use servers in the following countries:

Australia
Hong Kong
India
Indonesia
Malaysia
Singapore
Thailand
Taiwan
Mexico

Instagram (by Meta)

Instagram is a service provided by:

Meta Platforms Ireland Limited
Block J, Serpentine Avenue
Dublin 4
Ireland

The information automatically collected by Meta Platforms Ireland regarding your use of our Instagram profile is generally transferred to and stored on servers operated by:

Meta Platforms, Inc.
1601 Willow Road
Menlo Park, California 94025
United States

The processing of personal data in connection with visits to our Instagram profile is carried out on the basis of a joint controller agreement pursuant to Article 26 GDPR.

Further information, including details regarding Instagram Insights, can be found in Meta's privacy documentation.

Our service providers are located in and/or use servers in the following countries for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection:

Brazil
United States
Canada
Japan
South Korea
New Zealand
United Kingdom
Argentina

The adequacy decision for the United States serves as the legal basis for transfers of personal data provided that the respective service provider is certified. Such certification is in place.

Our service providers are also located in and/or use servers in the following countries:

Australia
Hong Kong
India
Indonesia
Malaysia
Singapore
Thailand
Taiwan
Mexico

10. Contact Information and Your Rights

10.1 Your Rights

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):

Right of Access (Article 15 GDPR): You have the right to obtain information about the personal data we process concerning you, within the scope provided by law.
Right to Rectification (Article 16 GDPR): You have the right to request the immediate correction of inaccurate personal data or the completion of incomplete personal data stored by us.
Right to Erasure (Article 17 GDPR): You have the right to request the deletion of your personal data stored by us, unless further processing is necessary:
- for exercising the right to freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing (Article 18 GDPR): You have the right to request the restriction of processing of your personal data where:
- you contest the accuracy of the personal data;
- the processing is unlawful, but you oppose the deletion of the data;
- we no longer require the data, but you need it for the establishment, exercise, or defense of legal claims; or
- you have objected to the processing pursuant to Article 21 GDPR.
Right to Data Portability (Article 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request that it be transmitted directly to another controller where technically feasible.
Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory authority. You may generally contact the supervisory authority at your habitual place of residence, place of work, or our registered place of business.

Right to Object

Where we process your personal data on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, as explained in this Privacy Policy, you have the right to object to such processing with effect for the future.

If the processing is carried out for direct marketing purposes, you may exercise your right to object at any time without providing any specific reason.

If the processing is carried out for purposes other than direct marketing, you may object only where your objection is based on grounds relating to your particular situation.

Once you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.

This does not apply where the processing is carried out for direct marketing purposes. In such cases, we will cease processing your personal data for direct marketing immediately.

10.2 Contact Information

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to exercise your rights of access, rectification, restriction of processing, or erasure, withdraw any consent you have given, or object to a particular use of your personal data, please contact us directly using the contact details provided in our Legal Notice (Imprint).