Privacy policy

Data Privacy Statement for www.almost8.com
 
The purpose of this data privacy statement is to inform you, as the user, about the gathering of personal data on this website. We therefore place great value on all the essential information concerning the protection of your data being presented in the most transparent way possible. Should anything nonetheless be unclear to you, or should you have any questions, and thus a need for clarification, please do not hesitate to contact us.
 
A. CONTROLLER
The Controller, within the meaning of the General Data Protection Regulation (Art. 4(7) GDPR) and the other national data privacy laws, as well as any other provisions under data protection law, is:
 
 
Q! Brand Solutions GmbH
Mommsenstr. 62
10629 Berlin, Germany
Tel: +49 30 8847 23 80
 
 
 
These contact details are thus relevant for all matters of a data privacy nature relating to this website, as well as any claims on your part under data privacy law.
 
 
B. COLLECTING AND STORING OF PERSONAL DATA WHEN VISITING OUR WEBSITE
We are informing you below about the procedures that take place when accessing our website that are relevant under data protection law.
 
1. Logfiles
Every time you access our website, we automatically gather data and information from the computer system that you use to access the website.
 
In the process, the following data is gathered:
 
(1) Information on your browser type and the browser version used
(2) Information on your operating system
(3) Information on your Internet Service Provider
(4) The date and time of your access
(5) Websites from which your system accesses our website
(6) Websites that are accessed by your system via our website
 
The data is stored in the log files of our system. Not affected by this are your IP address or other data which enable the data to be assigned to you. This data is not stored together with other personal data of yours. The legal basis for the temporary storage of this data is Art. 6(1)(f) GDPR.
 
Both the gathering of data and the saving of data in log files are necessary for the provision and operation of our website. Therefore, you do not have the option to object.
 
 
 
2. Cookies
We deploy so-called “cookies” on our website. These are small files that your browser creates automatically, and which are stored on your computer system if you visit our site. Cookies do not harm your computer system, and do not contain any viruses, Trojan horses, or other malware.
 
We deploy cookies to improve our website, thus, for example, to design it to be more user-friendly and adapt it to users’ interests.
 
In that respect, the following data is stored in the cookies and transmitted:
 
(1) Language settings
(2) Login details
(3) Making use of website functions
 
The data gathered in this way is pseudonymised by means of technical precautions. It is therefore not possible to allocate the data to you. The data is not stored together with any other personal data.
 
The data processed by cookies is necessary for the purposes mentioned, in order to protect our legitimate interests, as well as those of third parties, pursuant to Art. 6(1)(1)(f) GDPR.
 
Most browsers accept cookies automatically. In order to prevent this, you may, however, configure your browser in such a way that no cookies are stored on your computer system, or that a notice always appears before a new cookie is placed. Completely deactivating cookies may, however, lead to you not being able to use all the functions of our website.
 
3. Website analysis
We use the “Google Analytics” service on this website. This is a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
This service enables us to create pseudonymised usage profiles and use cookies (see Clause B. 2). The information generated by the cookie on your use of this website, such as
 
(1) Browser type/version
(2) Operating system
(3) Referring URL (the page visited previously)
(4) Time and country of the server request
 
may be transmitted to a server of Google Inc. in the USA and stored there. These servers are operated by Google Inc., USA, so that a transmission of the data to the USA cannot be ruled out. An adequate level of data protection is achieved using standard contractual clauses of the EU Commission within the meaning of Art. 46 Para. 2 lit. c) GDPR guaranteed. The information will be used to evaluate the use of the website, compile reports on the website activities, and provide further services associated with the use of the website and the Internet for market research purposes and to design these web pages in line with requirements. This information may also be transmitted to third parties, in so far as such is required by law or if third parties process such data by order. Your IP address will never be merged with other data of Google. The IP addresses are anonymised, so that the allocation of data will not be accessible to anyone.
 
You can prevent cookies from being installed by adjusting a corresponding setting in the browser software. We would like to point out that, in such a case, it may not be possible to use all the functions of this website in their entirety.
 
You can, moreover, prevent generation of the data by the cookie which relates to your use of the website from being recorded, as well as the processing of such data by Google Inc., by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
 
You can find further information on data privacy in connection with Google Analytics, for instance in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).
 
The cookies are stored for a period of 26 months.
 
For the optimisation and evaluation of our website, it is necessary to deploy Google Analytics pursuant to Art. 6(1)(F) GDPR. You can, via the following link, prevent the data from being gathered (opt-out): http://www.google.com/ads/preferences.
 
4. Marketing: Google AdWords
We use the “Google AdWords” marketing service on this website. This service is provided by Google Ireland Limited. (https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Irland).
 
This service enables us to place advertisements concerning our content with greater precision and evaluate them according to users’ interests. This is done by deploying cookies (see Clause B. 2.), which are stored on your computer system if you came to our website via a Google advertisement (a so-called “conversion cookie”). That makes it possible to track from which page you were re-routed. The service is, however, not aimed at identifying you personally. Your data may be transferred to a server in the USA and stored there. These servers are operated by Google Inc., USA, so that a transmission of the data to the USA cannot be ruled out. An adequate level of data protection is achieved using standard contractual clauses of the EU Commission within the meaning of Art. 46 Para. 2 lit. c) GDPR guaranteed.
 
If you would prefer not to take part in the tracking procedure, you can also reject the placing of a cookie that would be required for this – for instance by setting your browser accordingly, so that the automatic placing of cookies is deactivated. You can, however, also deactivate cookies for conversion tracking, by setting your browser in such a way that cookies from the domain www.googleadservices.com are blocked. You will find Google’s data privacy briefing on the conversion tracking here: (https://services.google.com/sitestats/en.html).
 
Such advertising efforts are necessary to assess our website and optimise the advertising efforts in accordance with Art. 6(1)(f) GDPR. You can, via the following link, prevent the data from being gathered (opt-out): http://www.google.com/ads/preferences.
 
5. Marketing: Facebook and Instagram
In addition, we use an advertising measure of the Facebook network, the so-called “Facebook Pixel”. This is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This concerns a script (“pixel”), that we use on our website. If you are simultaneously logged into the website of Facebook Ireland Ltd. when visiting our website, Facebook Ireland Ltd. may recognise that you have visited our website. That means that advertisements that are more targeted, and therefore more in line with your interests, can be shown on the network of Facebook Ireland Ltd. It can also be ascertained from that whether any users (and which ones) have been routed to our website by clicking on an advertisement in the network of Facebook Ireland Ltd.
 
We cannot guarantee that Facebook will also process the data in the USA. In this case, an adequate level of data protection is achieved using standard contractual clauses of the EU Commission within the meaning of Art. 46 Para. 2 lit. c) GDPR guaranteed (www.facebook.com/help/566994660333381).
 
You can infer the purpose and scope of the gathering of data and the further processing and use of the data by Facebook Ireland Ltd., as well as your rights and setting options for protecting your privacy in this respect from Facebook Ireland Ltd.’s data privacy policy (https://www.facebook.com/about/privacy/). You can adjust the settings for the Facebook advertisements yourself (https://www.facebook.com/settings?tab=ads).
 
This advertising measure of Facebook is necessary to promote our website and optimise the advertising efforts pursuant to Art. 6(1)(f) GDPR. Inter alia using the following links to pages of third party providers, you can prevent data from being gathered (opt-out): NAI – http://optout.networkadvertising.org/ or EDAA http://www.youronlinechoices.com/uk/your-ad-choices/
 
C. TAKING UP CONTACT
You can get in touch with us electronically by e-mail. In this case, the data that you send us by e-mail will be transmitted to us and saved by us.
 
This concerns the following:
 
(1) Your name
(2) Date of taking up contact
(3) Your e-mail address
(4) Any further data, provided by you
 
If you write us an e-mail and are interested in our services, the legal basis for the data processing is Art. 6(1)(b) GDPR.
 
This data, transmitted to us, will only be used for handling the conversation, and not passed on to third parties.
 
We will delete this data once it is no longer required for the respective purpose. In other words, if the e-mail exchange with you has been terminated and we have addressed your concern in full.
 
You at any time can revoke the consent to the processing of your data. For this purpose, please contact us using the above-mentioned options. In the event of a revocation, all your personal data that has been stored for the purpose of taking up contact with you will be deleted.
 
E. CONCLUSION OF THE AGREEMENT AT THE WEB SHOP
The following information relates to handling your data in connection with an order from the web shop on our website.
 
(1) Ordering
Should you place an order on our website, we will use the data provided by you to process the order and fulfil our contractual obligations.
 
The following data, which is necessary to fulfil the contract, is saved when you order.
 
(1) Your IP address
(2) Date and time of the registration
(3) Your name
(4) Your address
(5) Your e-mail address
 
The legal basis for the processing of this data results from Art. 6(1) b GDPR.
 
(2) Payment transaction
To carry out the payment transaction, we use third party payment provider. Besides the payment data (your bank details for the direct debit or your credit card details), the following data is also processed:
 
(1) Your name
(2) Your address
(3) Your e-mail address
(4) IP address
 
The specified payment data and the other data will not be passed on by us or the payment provider to third parties who are not involved in the performance of the contract and the processing of the payment. Please note that payment providers can work with credit reporting agencies. It is therefore possible that your data will be transmitted to the companies named by the payment providers in their privacy policy.
 
The legal basis for the storage and processing of this data follows based on the concluded contract from Art. 6 Paragraph 1 lit. b GDPR.
 
You have the option to object to the processing of your data at any time. Please use the contact options mentioned above. In the event of an objection, all of your personal data will be deleted, unless there is a statutory retention period to the contrary.
 
The following payment providers can be used:
 
PayPal: This is a service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. You can view PayPal's data protection declaration here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
 
(3) Shipment service provider
The goods ordered are shipped via the company named on the website. We pass on the following data to the shipment service provider for this purpose:
 
(1) Your name
(2) Your address
 
The legal basis for the storage and processing of this data results from Art. 6(1)(b) GDPR.
 
You at any time can revoke the consent to the processing of your data. Please, for this purpose, contact us using the above-mentioned options. In the event of a revocation, all your personal data will be deleted, if no statutory archival period prevents it.
 
F. PROCESSING IN THIRD COUNTRIES IN GENERAL
Insofar as and unless otherwise stated above, your personal data will be processed in countries outside the European Union (EU) or the European Economic Area (EEA) exclusively based on the legal requirements according to Art. 44 GDPR. In the present case, this is exclusively the case either based on an adequacy decision by the European Commission (Art. 45 GDPR) and / or on the basis of suitable guarantees (Art. 46 GDPR).
 
G. GENERAL RETENTION PERIOD
In general, personal data is only stored for as long as it is necessary to fulfil the purpose of data collection or to comply with the respective statutory retention period. After the purpose no longer applies or the deadline has expired, the data will be deleted.
 
H. RIGHTS OF DATA SUBJECTS
In so far as we have processed personal data of yours, you are the data subject within the meaning of the GDPR, and you have the following rights in relation to us:
(1) Art. 15 GDPR – You can request information about your personal data processed by us. You can in particular request information about the purposes of the processing, the category of personal data, the category of recipients to who your data has been or will be disclosed, the scheduled duration of storage, the existence of a right of correction, deletion, limitation of the processing or opposition, the existing of a right of appeal, the origin of your data, in so far as it was not gathered by us, and also the existence of automated decision-making, including profiling and any meaningful information on the details of the latter;
(2) Art. 16 GDPR – you may request the immediate correction of incorrect data or completion of your personal data stored with us.
(3) Art. 17 GDPR – you may request the deletion of your personal data stored with us, unless the processing is necessary in order to exercise the right of freedom of expression and information, for fulfilling a legal obligation, on grounds of the public interest or in order to assert, exercise or defend legal claims.
(4) Art . 18 GDPR- you may request that the processing of your personal data to be limited,
in so far as the accuracy of the data is disputed by you,
the processing is illegitimate, however you refuse to have it deleted and we no longer need the data,
however you need it to assert,
exercise or defend legal claims or you have filed an objection to the processing under Art. 21 GDPR;
(5) Art. 20 GDPR – you may obtain your personal data that you have provided us with in a structured, prevalent and machine-readable format, or to request the transmission of it to another officer.
(6) Art. 7(3) GDPR – you may revoke your consent, previously granted to us, at any time. The consequence of this is that we can no longer, in the future, continue the data processing that was based on such consent.
(7) Art. 77 GDPR – You may complain to a supervisory authority. You can usually, for this purpose, contact the supervisory authority at your usual place of residence or place of work or our place of business.
 
I. THE RIGHT OF OPPOSITION
Should your personal data be processed on the basis of justified interests pursuant to Art. 6(1)(1)(f) GDPR, you are entitled, under Art. 21 GDPR, to file an objection to the processing of your personal data, in so far as grounds exist for the latter which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without details of any special situation.
 
If you wish to make use of your right of revocation or right of objection, it is sufficient to send an e-mail to the above-mentioned e-mail address.