PRIVACY POLICY
Responsible in terms of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
Ecom Brands GmbH
Jonas Tank
Rödingsmarkt 31-33
20459 Hamburg
Phone: 040-716 68 954
Email: support@ecom-brands.de
We appreciate your interest in our website. The protection of your privacy is very important to us. In the following we will inform you in detail about the handling of your data on our website.
1. Storage of access data in server log files and hosting
You can visit our websites without giving any personal information. Each time a web page is called up, the web server merely automatically stores a so-called server log file which contains, for example, the name of the requested file, your IP address, date and time of retrieval, transferred data volume and the requesting provider (access data) and documents the retrieval.
These access data are evaluated exclusively for the purpose of ensuring a trouble-free operation of the site as well as the improvement of our offer. This is in accordance with Art. 6 para. 1 p. 1 lit. F DSGVO the preservation of our legitimate interests, which predominate in the context of a weighing up of interests, in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your page visit.
Third Party Hosting Services
Within the framework of a processing on our behalf, a third party provider provides the services for hosting and displaying the website. This serves to safeguard our legitimate interests, which are predominantly justified in the interests of weighing up our interests, in order to correctly present our offer. All data collected as part of the use of this website or in designated forms in the online shop as described below will be processed on its servers. Processing on other servers takes place only in the frame explained here.
This service provider is located within a country of the European Union or the European Economic Area.
2. Data collection and use for contract processing and opening a customer account
We collect personal data if you voluntarily provide us with this information as part of your order, when contacting us (eg via contact form or e-mail) or when opening a customer account. Obligatory fields are marked as such, since in these cases we need the data for contract execution, or to process your contact or opening the customer account and you can not complete the order and / or opening the account without their information, or can not send the contact , Which data are collected, can be seen from the respective input forms. We use the data provided by you in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO for contract handling and processing of your inquiries. After completion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods, unless you have expressly consented to a further use of your data or we reserve the right to further data use, the is legally permitted and about which we inform you in this statement. The deletion of your customer account is possible at any time and can be done either by a message to the contact option described below or via a designated function in the customer account.
3. Data transfer to fulfill the contract
In order to fulfill the contract in accordance with Art. 6 Paragraph 1 Sentence 1 lit. We use YouSellWeSend GmbH as a logistics service provider. YouSellWeSend GmbH provides logistics services on our behalf. For this purpose, we will send YouSellWeSend GmbH your name and recipient address, your e-mail address, telephone number, customer reference number, the name of the invoice recipient and the invoice address. YouSellWeSend GmbH is contractually obliged to use this data only for the purpose described above and in accordance with our instructions. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us, or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.
For service purposes in customer support, we use software-as-a-service solutions from companies that are based in a country outside the European Union. The data is not transferred to the company itself, but only processed further in the corresponding software solutions exclusively by our employees. The transmission of personal data to this company takes place only within the framework of the necessity to fulfill the contract. Solutions from Zendesk, Inc, 1019 Market Street, 6th Floor, San Francisco, California 94103 and Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA (www.google.de), both of which have their headquarters in the USA and have been certified under the EU-US Privacy Shield. Current certificates can HERE be viewed. Under the agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
4. E-mail Newsletter
If you subscribe to our newsletter, we will use the data required or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 para. 1 p. 1 lit. to send a DSGVO.
The deregistration from the newsletter is possible at any time and can be done either by a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing we delete your e-mail address, as far as you have not expressly consented to a further use of your data or we reserve the right to further data use, which is permitted by law and about which we inform you in this statement.
The newsletter is sent as part of a processing on our behalf by a service provider, to which we pass on your e-mail address.
This service provider is located within a country of the European Union or the European Economic Area.
5. Contact inquiries & contact options
If you contact us via contact form or e-mail, the data provided by you will be used to process your request. The specification of the data is necessary for processing and answering your inquiry - without their provision we can not answer your inquiry or at best only to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.
Contact Form
If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided, will be stored by us for the purpose of processing the application and in case of follow-up questions. We do not pass on this data without further consent.
Your data will be deleted, provided that your request has been finally answered and the deletion does not conflict with any statutory storage requirements, such as in the event of subsequent contract execution.
6. Data usage in payment processing
We use external payment service providers through whose platforms the user and we can carry out payment transactions (e.g., each with a link to the data protection declaration, PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de/datenschutz/), Direct (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/de/content/privacy-policy-statement.html)
As part of the fulfillment of contracts, we use the payment service providers on the basis of Art. 6 Para. 1 lit. b. GDPR. In addition, we use external payment service providers based on our legitimate interests in accordance with. Art. 6 para. 1 lit. f. GDPR in order to offer our users effective and secure payment options.
The data processed by the payment service providers include inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, sums and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative information about the payment. Under certain circumstances, the data will be transmitted to credit agencies by the payment service provider. The purpose of this transmission is to check identity and creditworthiness. For this we refer to the terms and conditions and data protection information of the payment service providers.
For the payment transactions, the terms and conditions and the privacy notices of the respective payment service providers, which are available within the respective websites, or transaction applications apply. We also refer to these for further information and assertion of rights of withdrawal, information and other data subjects.
7. Cookies and web analytics
In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our predominantly legitimate interests in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR. Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). You can see the duration of the storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings.
You can find these for the respective browser under the following links:
Cookie settings in Internet Explorer ™
Cookie settings in Safari ™
Cookie settings in Chrome ™
Cookie settings in Firefox ™
Cookie settings in Opera ™
Failure to accept cookies may limit the functionality of our website.
8. SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http: //" to "https: //" and by the lock symbol in your browser line. If the SSL encryption is activated, the data that you transmit to us cannot be read by third parties.
9. Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics, a web analysis service from Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA (www.google.de), for website analysis. This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. Google (Universal) Analytics uses methods that enable your use of the website to be analyzed, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and saved there. By activating the IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not merged with other Google data. After the purpose and the end of the use of Google Analytics by us, the data collected in this context will be deleted.
Google Inc is headquartered in the USA and is certified under the EU-US Privacy Shield. You can obtain a current certificate from: List of companies in the US-EU Privacy Shield. You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: Deactivate Google Analytics
This website uses Google Analytics' demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section "Refusal of data collection".
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
For more information about how Google Analytics handles user data, see Google's privacy policy: Google privacy statements
10.Google reCAPTCHA
For the purpose of protecting against misuse of our web forms and against spam, we use the Google reCAPTCHA service as part of some of the forms on this website. Google reCAPTCHA is an offer from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). By checking manual entries, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. According to Art. 6 Para. 1 S. 1 lit.
Google reCAPTCHA uses a code integrated into the website, a so-called JavaScript, within the scope of the verification, which enables an analysis of the use of the website by you, such as cookies. The automatically collected information about your use of this website, including your IP address, is usually transferred to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are evaluated by Google reCAPTCHA. Reading or saving of personal data from the input fields of the respective form does not take place.
As far as information is transmitted to and stored by Google on servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can here can be viewed. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You can prevent Google from collecting the data generated by the JavaScript or the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by executing it in your browser settings prevent JavaScript or the setting of cookies. Please note that this may restrict the functionality of our website for your use. You can find more information on Google's data protection policy here .
11. Use of Google Web Fonts
In order to present our content across browsers correctly and graphically, we use "Google Web Fonts" from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereafter "Google") to display fonts.
Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google's privacy policy at https://www.google.com/policies/privacy/.
12. Use of Google Maps
We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.
You can find more information about data processing by Google in the Google data protection information: https://policies.google.com/privacy. There you can also change your personal data protection settings in the data protection center.
You can find detailed instructions for managing your own data in connection with Google products here: https://www.dataliberation.org
When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged into Google, your data will be assigned directly to your account.
If you do not want the assignment in your Google profile, you must log out of Google before activating the button. Google stores your data as a user profile and uses it for advertising, market research and / or needs-based design of its websites. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
The provider currently does not offer the option of simply opting out or blocking data transmission. If you want to prevent your activities on our website from being tracked, please revoke your consent in the cookie consent tool for the corresponding cookie category or for all technically unnecessary cookies and data transfers. In this case, however, you may not be able to use our website or only to a limited extent.
13. Advertising via marketing networks
Use of Google Adwords Conversion
We use Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. We are interested in showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertising media are delivered by Google via so-called "ad servers". We use ad server cookies for this purpose, through which certain parameters for measuring success, such as the insertion of advertisements or clicks by the user, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The analysis values for this cookie are usually the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user is not would like to be addressed more).
These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data that is collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives the information that you are visiting the corresponding part of our website have accessed or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address.
You can prevent participation in this tracking process in various ways:
- by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any advertisements from third-party providers;
- by deactivating the cookies for conversion tracking by setting your browser so that cookies from the domain "www.googleadservices.com" are blocked, www.google.de/settings/ads, whereby this setting is deleted when you Delete your cookies;
- by deactivating the interest-related advertisements of the providers who are part of the self-regulation campaign “About Ads” via the link www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies;
- by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
The legal basis for the processing of your data is Article 6 Paragraph 1 Sentence 1 Letter f GDPR.
Further information on data protection at Google can be found here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html.
Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://thenai.org/ visit. Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
Google AdWords Remarketing
Google Adwords promotes this site on Google's search results and on third-party websites. For this purpose, when visiting our website the so-called Remarketing cookie is set by Google, which automatically allows a interest-based CookieID and based on the pages you visit an interest-based advertising. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our website in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO. After the expiration and end of the use of Google AdWords Remarketing by us, the data collected in this context will be deleted.
Additional processing will only take place if you have agreed with Google that your web and app browsing history will be linked to your Google Account by Google and information from your Google Account will be used to personalize your ads on the web see. In this case, when you log in to Google during the page visit of our website, Google uses your data with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google will temporarily associate your personal information with Google Analytics data to create audiences.
Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA (www.google.de), has its headquarters in the USA and is certified under the EU-US Privacy Shield. Current certificates can HERE be viewed. Under the agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
You can use the remarketing cookie over this link deactivate. You can also join in the Digital Advertising Alliance inform about the setting of cookies and make settings for this.
14. Social Media PlugIns
Use of social plugins from Facebook, Google, Twitter, Instagram, WhatsApp and Pinterest
So-called social plugins (“plugins”) are used by social networks on our website. When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Facebook, Google, Twitter or Instagram servers. The content of the plug-in is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly assign your visit to our website to your profile in the respective social network. If you interact with the plugins, for example press the “Like” or “Share” button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and shown to your contacts there.
This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR.
The purpose and scope of the data collection and the further processing and use of the data by the provider as well as a contact option and your related rights and setting options to protect your privacy can be found in the data protection information of the provider:
- Provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. View Facebook's privacy policy
- Twitter: Provider Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. View Twitter's privacy policy
- Google+: Provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. See Google's privacy policy
- Instagram: Provider Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. View Instagram's privacy policy
- Pinterest: Provider Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA. View the privacy policy of Pinterest
- TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland View TikTok's data protection declaration: https://www.tiktok.com/legal/privacy-policy?lang=de
- WhatsApp: Provider WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA. View WhatsApp's privacy policy
If you do not want the social networks to assign the data collected via our website directly to your profile in the respective service, you must log out of the relevant service before visiting our website. You can completely prevent the loading of the plugins with add-ons for your browser, e.g. B. with the script blocker "NoScript" (https://noscript.net/).
15. Youtube video plugins
Third-party content is included on this website. This content is provided by Google Inc. (“provider”). YouTube is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").
For videos from Youtube, which are included on our site, the advanced privacy setting is enabled. This means that no information is collected and stored on Youtube by website visitors, unless they are playing the video. The integration of the videos serves the preservation of our legitimate interests, which predominate in the context of a weighing up of interests, in an optimal marketing of our offer according to Art. 6 para. 1 S. 1 lit. f DSGVO.
For the purpose and scope of the data collection and the further processing and use of the data by the provider as well as your rights in this regard and setting options for the protection of your privacy, please refer to Data protection information from Google
16. Contact and your rights
You can always exercise the following rights under the contact details of our data protection officer:
- In accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
- In accordance with Art. 16 GDPR, the right to immediately request the correction of incorrect or incomplete personal data stored by us;
- In accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing: to exercise the right to freedom of expression and information; to fulfill a legal obligation; for reasons of public interest or - is necessary for the establishment, exercise or defense of legal claims;
- In accordance with Art. 18 GDPR, the right to request that the processing of your personal data be restricted, provided that: you dispute the correctness of the data; the processing is unlawful, but you refuse to delete it; we no longer need the data, but you need them to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
- In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
- According to Art. 77 GDPR the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.
If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data as well as revocation of granted consent or objection to a specific use of data, please contact us directly using the contact details in our imprint. If you wish, you can also use the contact details provided there to send you appropriate forms in order to be able to enforce your rights as described above.
You can contact a regulatory authority at any time with a complaint, such as: B. to the competent supervisory authority of the federal state of your domicile or to the authority responsible for us as responsible authority.
You will find a list of the supervisory authorities (for the non-public area) with their addresses here .
17. Right of objection
Insofar as we process personal data as explained above in order to safeguard our legitimate interests that prevail in the context of a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you will only have the right to object if there are grounds arising from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.
If you have any questions about data protection, please send us an email or contact the person responsible for data protection directly:
Ecom Brands GmbH
Jonas Tank
Rödingsmarkt 31-33
20459 Hamburg
Phone: 040-716 68 954
Email: support@ecom-brands.de
