Unless stated otherwise below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided in the subsequent processing operations. "Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of the access, the IP address, the volume of data transferred, and the requesting provider. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services. Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Contact
Controller

Contact us if you wish. The controller responsible for data processing is:
Elvira Sadykov , Sophienstr. 2, 95444 Bayreuth Germany, 01638520390, huhu@freudenherz-bayreuth.de

Initiative contact by the customer via e-mail

If you initiate business contact with us via e-mail, we will collect your personal data (name, e-mail address, message text) only to the extent provided by you. The purpose of data processing is to process and respond to your contact request. If the contact serves to carry out pre-contractual measures (e.g., consultation regarding interest in a purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. If the contact occurs for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data concerning you, which is based on Art. 6(1)(f) GDPR, for reasons arising from your particular situation. We use your e-mail address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Orders
Collection, processing, and disclosure of personal data for orders

When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and the handling of your inquiries. Providing the data is necessary for the conclusion of a contract. Failure to provide it means that no contract can be concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the fulfillment of a contract with you. Your data may be disclosed, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of the data transfer is limited to a minimum. Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Advertising
Use of the e-mail address for sending newsletters

We use your e-mail address to send information and offers via newsletter, provided you have expressly consented to this. Data processing serves exclusively the purpose of promotional communication. For this, we process your e-mail address and, if applicable, other data that you provided voluntarily during registration for our newsletter. Processing is based on Art. 6(1)(a) GDPR with your consent. You may revoke your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list. Despite removal from the list, we may continue to store your e-mail address in a so-called blacklist to prevent you from receiving newsletter e-mails from us in the future. This storage is based on Art. 6(1)(f) GDPR due to our and your legitimate interest in preventing the renewed use of your e-mail address to send our newsletter. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.

Payment service providers
Use of PayPal Express

We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of offering you payment via the PayPal Express service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognized. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you. By selecting and using PayPal Express, the data necessary for payment processing is transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express service can be found in the corresponding
Privacy Policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#UpdatedPS.

_

Use of PayPal Check-Out

We use the payment service PayPal Check-Out from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR. Cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you. Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal: For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received regarding the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, which include, among other things, address data in their calculation. Your interests worthy of protection are taken into account in accordance with legal provisions. Data processing serves the purpose of a credit check for contract initiation. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default if PayPal provides advance payment. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you, which is based on Art. 6(1)(f) GDPR, by notifying PayPal. Providing the data is necessary for the conclusion of a contract with your desired payment method. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.

Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6(1)(b) GDPR. To execute this payment method, the data may then be forwarded by PayPal to the respective provider. This processing is based on Art. 6(1)(b) GDPR. Local third-party providers can be, for example: Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) Purchase on account via PayPal
When paying via the purchase on account method, the data required for payment processing is first transmitted to PayPal. To execute this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR. Ratepay may perform a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies according to the process described above. Data processing serves the purpose of a credit check for contract initiation. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default if Ratepay provides advance payment. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/. Further information on data processing when using PayPal can be found in the corresponding Privacy Policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Shopify Payments

We use the payment service "Shopify Payments" from Shopify International Limited (2nd Floor Victoria Buildings, 1- 2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). Data processing serves the purpose of offering you payment via the Shopify Payments service. By selecting and using a corresponding "Shopify Payments" method, the data required for payment processing is transmitted to Stripe to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR. Stripe reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received regarding the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, which include, among other things, address data in their calculation. Your interests worthy of protection are taken into account in accordance with legal provisions. Data processing serves the purpose of a credit check for contract initiation. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default if Stripe provides advance payment.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you, which is based on Art. 6(1)(f) GDPR, by notifying Stripe. Providing the data is necessary for the conclusion of a contract with your desired payment method. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen. Further information on data processing when using the Shopify Payments service can be found in the Shopify Privacy Policy at: https://www.shopify.com/de/legal/datenschutz. Further information on data processing during payment processing via the payment service provider Stripe can be found in the Stripe Privacy Policy at: https://stripe.com/de/privacy.

Cookies
Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again. Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, and also prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. We must point out, however, that you may not be able to use all functions of this website to their full extent.

Under the following links, you can find out how to manage (including deactivate) cookies in the most common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in this privacy policy, we use only these technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change. The use of cookies or comparable technologies is based on § 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our services.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.

Plug-ins and others
Use of social plug-ins via "Shariff"

We use social media plug-ins on our website. To ensure you maintain control over your data, we use privacy-friendly "Shariff" buttons. No links to social media servers are established, and consequently no data is transmitted, without your express consent. "Shariff" was developed by the specialists at the computer magazine c’t. It provides more privacy online and replaces the standard social media "Share" buttons. You can find more information about the Shariff project here: https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html. When you click the buttons, a pop-up window appears, allowing you to log in to the respective provider with your details. A direct connection to the social media networks is only established after this active login by you. By logging in, you give your consent for your data to be transferred to the respective social media provider. This includes, among other things, your IP address and information about which of our pages you have visited. If you are simultaneously logged in to one or more of your social media accounts, the collected information will also be associated with your corresponding profiles. You can only prevent this association by logging out of your social media accounts before visiting our website and before activating the buttons. The social media networks named below are integrated using the "Shariff" function. Further information on the scope and purpose of the collection and use of data, as well as your rights and options regarding the protection of your privacy, can be found in the linked privacy policies of the providers. Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388. Your data may be transferred to the USA. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has thus committed to complying with European data protection principles.
Pinterest of Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA) https://policy.pinterest.com/de/privacy-policy Your data may be transferred to the USA. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.

Use of Google Maps

We use the function for embedding Google Maps, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google"), on our website.

This function allows for the visual display of geographical information and interactive maps. When accessing pages where Google Maps is embedded, Google also collects, processes, and uses data from visitors to the websites. Your data may also be transferred to the USA in this process. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus committed to complying with European data protection principles.

The use of cookies or similar technologies occurs with your consent based on § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data occurs with your consent based on Art. 6 (1) (a) GDPR. You can revoke your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Further information on the collection and use of data by Google can be found in Google’s privacy policy at https://www.google.com/privacypolicy.html. There, you also have the option in the privacy center to change your settings so that you can manage and protect the data processed by Google.

Data subject rights and storage period
Storage duration

After full completion of the contract, data is initially stored for the duration of the warranty period, then taking into account statutory, particularly tax and commercial law retention periods, and then deleted after the expiry of these periods, provided you have not consented to further processing and use.

Rights of the data subject

If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability. Furthermore, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) (f) GDPR, as well as to processing for the purposes of direct marketing.

Right to lodge a complaint with a supervisory authority

According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful. You can lodge a complaint with, among others, the supervisory authority responsible for us, which you can reach at the following contact details:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
E-mail: poststelle@lda.bayern.de

Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future. Once an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.