Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is given in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.

Contact

Controller
Contact us if you wish. The controller for data processing is: A.S.SAT TES UG, Tachauer Str. 50, 95671 Bärnau Germany, 09635 92 49 60, a.sobczynski@assat-tes-ug.de

Customer's Proactive Contact via Email
If you proactively contact us by email for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of processing and responding to your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing when using the Contact Form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.
If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer Account Orders      

Customer Account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.

Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.

Reviews       Advertising      


Use of Judge.me
We use the "Judge.me" review system from Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website.
Judge.me allows us to collect customer reviews and display them on our website to give you an insight into the quality of our services.
After an order, you may receive an invitation from us or Judge.me to submit a review, and then submit a review. The following data may be processed by us or Judge.me: email address, name, phone number, address, information about your device (IP address, information about your web browser and operating system used), information about the purchased product or service used (order number, product details), the content of your review and the star rating you gave, your product photos or videos (if you attached them to your product review). This data may also be used for the purpose of verifying your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision from the EU Commission exists for the United Kingdom.
Your data may be transferred to the USA. An adequacy decision from the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under TADPF. This data transfer takes place on the basis of special contracts approved for use in the United Kingdom, which offer the same protection that personal data enjoys in the United Kingdom.
The use of cookies or similar technologies is based on your consent in accordance with § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR, provided you have expressly agreed to the transfer of your data and the receipt of the review request. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.

Use of the email address for sending newsletters
We use your email address to send you information and offers via newsletter, provided you have expressly consented to this. The data processing serves exclusively the purpose of advertising. For this purpose, we process your email address and, if applicable, other data that you voluntarily provided when registering for our newsletter.
Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time, without affecting the legality of the processing carried out on the basis of the consent until revocation.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may still store your email address in a so-called blacklist to prevent you from receiving future newsletter emails from us. This storage takes place on the basis of Art. 6 (1) lit. f GDPR due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.

Use of Brevo (formerly Sendinblue)
For sending newsletters, we use the service of Sendinblue GmbH (Köpenicker Straße 126, 10179 Berlin; “Brevo”) as part of order processing.
We transmit the information you provided during newsletter registration (email address, possibly first and last name) to Brevo. The data processing serves the purpose of sending newsletters and their statistical evaluation.
To evaluate newsletter campaigns, the sent email newsletters contain a 1x1 pixel graphic (tracking pixel) and/or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, your personal data such as IP address, browser type and device, and the time of opening may also be collected. Usage profiles can be created from this data under a pseudonym. The collected data is not used to identify you personally. The collected data is only used for statistical evaluation to improve newsletter campaigns.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
Further information and Brevo's privacy policy can be found at: https://www.brevo.com/de/legal/privacypolicy/. 

Shipping Providers      

Transfer of the email address to shipping companies for information on shipping status
We pass on your email address to the transport company as part of contract processing, provided you have expressly consented to this in the order process. The transfer serves the purpose of informing you by email about the shipping status. Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out on the basis of the consent until revocation.

Payment Service Providers      

Use of Shopify Payments
We use the payment service "Shopify Payments" from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Payment processing in this case is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing serves the purpose of being able to offer you payment via the Shopify Payments service. By selecting and using a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Stripe reserves the right, if necessary, to obtain a credit rating based on mathematically-statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematically-statistical procedures and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of credit checking for contract initiation. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when Stripe makes advance payments.
You have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation by notifying Stripe. The provision of data is necessary for the conclusion of the contract with the payment method you desire. Failure to provide it will result in the contract not being concluded with the payment method you have chosen.
Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing during payment processing via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.

Use of the Shopify Consent Tool (Shopify Privacy & Compliance)
We use the "Shopify Privacy & Compliance" consent tool from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to give consent for data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. Data processing serves the purpose of obtaining and documenting necessary consents for data processing and thus complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Data processing takes place to fulfill a legal obligation based on Art. 6 (1) (c) GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz.


Analysis      Ad Tracking      


Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The purpose of data processing is the analysis of this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet use to the website operator.
The following information, among others, may be collected: IP address, date and time of page view, click path, information about the browser and device you are using, visited pages, referrer URL (website from which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and all other data Google has about you.

Your IP address will be truncated by us on our own servers beforehand. Google thus receives exclusively pseudonymized data.

Google uses technologies such as cookies, browser web storage, and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies takes place with your consent based on Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR.

The processing of your personal data takes place with your consent based on Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out based on the consent until withdrawal.

We use the extended implementation of consent mode (Advanced Consent Mode). In this mode, even if consent is not given, user data is transmitted to Google in the form of "pings." These pings may contain, among other things, the following information: IP address for deriving the IP country (the IP address is not logged), date and time of page view, URL of visited pages, user agent, referrer URL (website from which our website was accessed), or information about triggering website events such as a conversion. Based on this information, Google models user data to enable a comprehensive usage analysis despite the refusal of consent.

The information generated by these means about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to adhering to European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites, at https://policies.google.com/privacy?hl=de&gl=de, and at https://business.safety.google/privacy/.

Plugins and Other

Use of Cloudflare
We use the Cloudflare CDN (Content Delivery Network) from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; "Cloudflare") on our website. This is a cross-regional network of servers in various data centers, with which our web server connects and through which certain content of our website is delivered.
The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly.
The following information, among others, may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself under the TADPF and has thereby committed to adhering to European data protection principles.
The processing of your personal data is based on Art. 6 (1) (f) GDPR due to our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation, based on Art. 6 (1) (f) GDPR.
Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.

Integration of the Händlerbund Member Logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. When you access our website, information is automatically sent to the server of Händlerbund e.V. by the browser used on your end device. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automatic deletion:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider. 

The temporary storage of the IP address by the system is necessary to enable the delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimize the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
Data processing serves the purpose of uniform display of fonts on our website. To load the fonts, a connection to Google's servers is established when the page is accessed. Cookies may be used here. In doing so, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. An adequacy decision of the EU Commission is available for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is thus obliged to comply with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

Data Subject Rights and Storage Period

Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 para. 1 GDPR, you have a right to object to processing based on Art. 6 para. 1 f GDPR, as well as to processing for the purpose of direct marketing.

Right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among other things, with the supervisory authority responsible for us, which you can reach at the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
E-Mail: poststelle@lda.bayern.de

Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.
After a successful objection, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.