Data protection
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally or contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This applies only insofar as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our websites without providing any personal information.
Each time you access our website, usage data is transmitted by your internet browser to us or our web host/IT service provider and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Contact
Controller
Contact us if you wish. The controller for data processing is: Patrick Kuhrt, Weller Weg 14, 39576 Heeren Germany, 01791039205, lovelow.shop@gmail.com
Proactive Contact by Customer via Email
If you proactively contact us by email for business purposes, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves to process and answer your contact request. If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
We only use your email address to process your request. Your data will then be deleted after observing statutory retention periods, unless you have consented to further processing and use.
Collection and Processing when using the Contact Form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves the purpose of making contact. If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
We only use your email address to process your request. Your data will then be deleted after observing statutory retention periods, unless you have consented to further processing and use.
Collection and Processing when using the Cancellation Button
If you have concluded a contract via our online presence, we provide you with a cancellation function (cancellation button) through which you can submit your declaration of cancellation directly. When using the cancellation function, we only collect your personal data (name, email address, information to identify the contract or part of the contract you wish to cancel, as well as the time (date and time) of sending the cancellation declaration) to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to cancel your contract and for the proper processing of your cancellation. If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Otherwise, the data processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR, to fulfill a legal obligation to provide you with a cancellation function on our online presence. We only use your email address to process your cancellation declaration. Your data will then be deleted after observing statutory retention periods, unless you have consented to further processing and use.
The processing of your personal data serves the purpose of legally fulfilling the statutory requirements for the design of the cancellation function and is carried out on the basis of Art. 6 para. 1 lit. c GDPR. This data processing is also carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in being able to provide you with a user-friendly cancellation option. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
Orders
Collection, Processing and Disclosure of Personal Data for Orders
When ordering, we only collect and process your personal data to the extent necessary for the fulfillment and processing of your order and for handling your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. b
GDPR and is necessary for the fulfillment of a contract with you.
Your data may be passed on, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to a minimum.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Payment Service Providers
Use of PayPal
We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of Shopify Payments
We use the payment service "Shopify Payments" from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Payment processing in this case is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing serves the purpose of being able to offer you payment via the Shopify Payments service. By selecting and using an appropriate "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Stripe reserves the right, if necessary, to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes, among other things, address data. Your legitimate concerns are taken into account in accordance with legal provisions. The data processing serves the purpose of credit checking for contract initiation. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Stripe makes advance payments.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying Stripe. The provision of the data is necessary for the conclusion of the contract with your desired payment method. Failure to provide the data means that the contract cannot be concluded with your chosen payment method.
Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing when processing payments via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.
Data Subject Rights and Storage Period
Storage Period
After complete contract processing, the data will first be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.
Data Subject Rights
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, rectification, erasure, restriction of processing, data portability. In addition, you have a right to object to processing based on Art. 6 para. 1 f GDPR, as well as to processing for the purpose of direct marketing, pursuant to Art. 21 para. 1 GDPR.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You can lodge a complaint, among other places, with the supervisory authority responsible for us, which you can reach at the following contact details:
State Commissioner for Data Protection Saxony-Anhalt
Leiterstraße 9
39104 Magdeburg
Tel.: +49 391 818030
Fax: +49 391 8180333
E-Mail: poststelle@lfd.sachsen-anhalt.de
Right to Object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right, for reasons arising from your particular situation, to object at any time to this processing with effect for the future. After an objection, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.