Privacy Policy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision has no consequences. This applies only insofar as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Contact
Controller
Please contact us if you wish. The controller for data processing is: Klugow Maxie Dolch Katja, Herzbergstraße 55a, 10365 Berlin Germany, DE307842870, info@3elfen.de
Customer-initiated contact via e-mail
If you initiate business contact with us via e-mail, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. Data processing serves the purpose of processing and answering your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR, on grounds relating to your particular situation.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Orders
Data Subject Rights and Storage Period
Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
Subject to the legal requirements, you have the following rights under Articles 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.
You also have a right to object against processing based on Art. 6 (1) f GDPR, as well as against processing for direct marketing purposes, pursuant to Art. 21 (1) GDPR.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data is not lawful.
You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16 – 18 (5th floor)
10969 Berlin
Tel.: +49 30 138890
Fax: +49 30 2155050
E-mail: mailbox@datenschutz-berlin.de
Right of objection
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.
Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision has no consequences. This applies only insofar as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our websites without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, date and time of retrieval, IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offer.
Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offer.
Contact
Controller
Please contact us if you wish. The controller for data processing is: Klugow Maxie Dolch Katja, Herzbergstraße 55a, 10365 Berlin Germany, DE307842870, info@3elfen.de
Customer-initiated contact via e-mail
If you initiate business contact with us via e-mail, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. Data processing serves the purpose of processing and answering your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR, on grounds relating to your particular situation.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the revocation button
If you have concluded a contract via our online presence, we provide you with a revocation function (revocation button) through which you can immediately submit your declaration of revocation.
When using the revocation function, we only collect your personal data (name, e-mail address, information for identifying the contract or part of the contract you wish to revoke, and the time (date and time) of sending the declaration of revocation) to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to revoke your contract and for the proper processing of your revocation.
If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Otherwise, data processing is carried out on the basis of Art. 6 (1) lit. c GDPR, to fulfill a legal obligation to provide you with a revocation function on our online presence.
We only use your e-mail address to process your declaration of revocation. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
The processing of your personal data serves the purpose of legally fulfilling the requirements for the design of the revocation function and is carried out on the basis of Art. 6 (1) lit. c GDPR. This data processing is also carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in being able to provide you with a user-friendly revocation option. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR, on grounds relating to your particular situation.
Collection, processing, and transfer of personal data for orders
When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and for handling your inquiries. The provision of the data is necessary for the conclusion of the contract. Non-provision will result in no contract being concluded. Processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data is passed on, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transfer is limited to a minimum.
Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.Data Subject Rights and Storage Period
Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
Subject to the legal requirements, you have the following rights under Articles 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.
You also have a right to object against processing based on Art. 6 (1) f GDPR, as well as against processing for direct marketing purposes, pursuant to Art. 21 (1) GDPR.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data is not lawful.
You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16 – 18 (5th floor)
10969 Berlin
Tel.: +49 30 138890
Fax: +49 30 2155050
E-mail: mailbox@datenschutz-berlin.de
Right of objection
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.