Privacy Policy
1. Information on the Collection of Personal Data and Contact Details of the Controller
1.1. Thank you for visiting our website. In the following, we would like to inform you about the processing of your personal data when using our website. Personal data is generally defined as any data by which you can be personally identified.
1.2. The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Sylvia Stave
Zur Guten Hoffnung 55
21109 Hamburg-Wilhelmsburg
Germany
Phone: +49 (0) 172 911 09 97
Email: stave@bolleband.de
1.3. In order to protect the security of your data during transmission, we use encryption methods in accordance with the current state of the art (e.g. SSL or TLS) via HTTPS.
2. Data Collection When Visiting Our Website
Each time our website is accessed, our system automatically collects data and information transmitted by your browser to our server (so-called "server log files"). The following technically necessary data is collected:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Operating system used
- Browser used
- IP address used (if applicable: in anonymized form)
The legal basis for processing is Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and maintaining the functionality of our website.
The temporary storage of the IP address by the system is necessary in order to enable delivery of the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.
Data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this will be deleted after seven days at the latest. Storage beyond this period is possible. In this case, users' IP addresses are deleted or anonymized so that assignment to the accessing client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right to object.
We use the Ecwid shop system operated by:
Ecwid, Inc.
144 West D Street, Suite 103
Encinitas, California 92024
USA
Further information on Ecwid’s data protection can be found at:
https://www.ecwid.com/eu-privacy-policy
3. Cookies
Our website uses cookies.
Cookies are text files that are stored on the user’s device. Some functions of our website cannot be offered without the use of cookies. For this purpose, it is necessary that the browser is recognized even after a page change.
User data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data pursuant to Art. 6(1)(f) GDPR also lies in these purposes.
Our website may also use cookies that enable analysis of users’ browsing behavior (so-called third-party cookies). Further information on scope, purpose, legal basis and objection options can be found in the relevant sections of this privacy policy.
You, as the user, have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate, restrict or delete the transmission of cookies. If cookies for our website are deactivated, it may no longer be possible to fully use all website functions.
Some cookies are deleted after closing your browser (session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser during your next visit (persistent cookies). Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
4. Contact
When you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored.
If you contact us by email, only the data you provide will be transmitted.
The data will be used exclusively for processing the conversation and your request.
The legal basis for processing the data is Art. 6(1)(a) GDPR if the user has given consent.
If the email contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected and provided that there are no statutory retention obligations to the contrary.
The user has the possibility to withdraw consent to the processing of personal data at any time. In such a case, the conversation cannot be continued.
5. Data Processing for the Opening of a Customer Account and for Contract Processing
If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data required for the processing of your order.
We process the data provided by you to process your order.
We may cooperate with external service providers for order processing. For this purpose, it may be necessary to pass on the required personal data.
If transport companies are commissioned with the delivery of your goods, we will pass on the data necessary for delivery to the respective transport company.
The legal basis for the transfer of your data is Art. 6(1)(b) GDPR.
We use the Ecwid shop system (see Section 2).
6. Use of Your Data for Direct Advertising
6.1 Newsletter
You may subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input form will be transmitted to us. The only mandatory information is your email address.
The legal basis for processing your data after registration for the newsletter is Art. 6(1)(a) GDPR.
We store your IP address as well as the date and time of registration in order to trace any possible misuse of your email address.
You may unsubscribe from the newsletter at any time via the link provided in each newsletter.
6.2 Newsletter for Existing Customers
If you purchase goods or services and provide your email address, it may subsequently be used by us to send newsletters advertising our own similar goods or services.
The legal basis is Art. 6(1)(f) GDPR in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG).
You may object to the use of your email address for advertising purposes at any time with future effect.
7. Data Processing for Order Fulfilment
DHL
If delivery is carried out by DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will pass on your name and delivery address to DHL for delivery purposes pursuant to Art. 6(1)(b) GDPR.
PayPal
Payments are processed via:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
Your personal data will be transferred to PayPal as required pursuant to Art. 6(1)(b) GDPR.
Stripe
Payments are processed via:
Stripe Payments Europe Ltd
Block 4, Harcourt Centre
Harcourt Road
Dublin 2
Ireland
Data transfer takes place exclusively for payment processing in accordance with Art. 6(1)(b) GDPR.
11. Rights of the Data Subject
You have the following rights under the GDPR:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
12. Storage Period of Personal Data
Personal data will be stored for the duration of the respective statutory retention period. After expiry of this period, the data will be routinely deleted, provided that it is no longer required for the fulfilment or initiation of a contract and/or there is no legitimate interest in further storage.
