Privacy Policy
Information about the processing of your data in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR)
Contents
1. General information
2. Contact details of the controller and for questions about data protection
3. Data processing in connection with our online presence
3.1 Presence on social media
3.2 Use of payment service providers
4. Data processing when using our website
5. Data transfer to third parties and external recipients
6. Use of data for communication and marketing
7. Use of Imprint Privacy Protection (IP Management)
8. Data storage period
9. Data security
10. Your rights as a data subject
1. General information
Below, we would like to inform you about how we use and store personal data. If you request certain services (e.g. send us an email), personal data may be collected. In doing so, we comply with the applicable European data protection regulations.
2. Contact details of the controller and for questions about data protection
The controller responsible for the online presence associated with this privacy policy is
Nicole Bruch
c/o IP-Management #7939
Ludwig-Erhard-Straße 18
20459 Hamburg
Email: meowshka.store@gmail.com
3. Data processing in connection with our online presence
3.1 Presence on social media
Data processing on our Instagram account
We use the platform and services of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter ‘Meta’) for the information we publish. If you decide to use our Meta pages, you do so at your own risk. This applies in particular to the use of interactive functions (e.g. commenting or rating). We have no influence on the type and scope of data that Meta collects and processes. When you use our Meta pages, the IP address assigned to your device is transmitted to Meta. According to Meta, this IP address is anonymised (for IP addresses from Germany) and deleted after 90 days. Meta also stores information about your device. This information is used to provide us, as site operators, with statistical information.
Meta also provides us with statistical data for our websites. This is aggregated data that allows us to gain insight into how users interact with our website and enables us to optimise the presentation of our offering and communicate effectively with users. The legal basis for processing is Article 6(1)(f) of the GDPR, whereby our legitimate interest arises from the above-mentioned purposes. The data collected about you in this context is processed by Meta and may be transferred to countries outside the European Union. Information on the transfer of European data to third countries by Meta, including the Instagram platform, can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum
Further information on data protection at Meta and, in particular, on how you can object to processing or manage or delete the information held about you can be found in Meta's privacy policy: https://privacycenter.instagram.com/policy/
If you are logged into Meta services, a cookie with your ID is stored on your device. This allows Meta to track that you have visited our site and how you have used it. This also applies to all other Meta sites. Meta can also link your visits to these websites to your Meta profile. Meta can use this data to offer you tailored content or advertising. If you want to avoid this, you can log out of Meta or deactivate the ‘stay logged in’ function and delete the cookies on your device. This will delete Meta information that can be used to identify you directly. You can then use our Meta pages without your Meta ID being revealed. If you wish to use interactive features of the site (e.g. liking, commenting and messaging), a Meta login window will appear. Once you have logged in, Meta can assign you to your profile again.
Insofar as we, as the provider of our meta pages, process personal data exclusively ourselves, e.g. if you contact us regarding our products or give us your consent to do so, your data will be collected, processed and used for the purpose of responding to your enquiry or providing the service you have requested. The legal basis for processing is Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR
As the provider of our meta pages, we do not collect or process any other data from your use of our service.
Data processing on our YouTube channel
We operate a YouTube channel to share our content and offers via the YouTube platform, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘YouTube’). When you visit our YouTube channel or interact with our videos, YouTube collects and processes various data about you. YouTube collects data about your use of the platform, such as which videos you watch, the duration of your use and your interactions (e.g. likes, comments). YouTube uses this data for purposes including providing and improving the service, personalising advertising and analysing your use. We have no influence on this data processing by YouTube.
We use the statistics and reports provided by YouTube to gain insights into user behaviour on our channel and to better tailor our content to the interests of viewers. In addition, we process your data to respond to enquiries and communicate with you if you contact us via YouTube. We process your data on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interest is to analyse the success of our content and to offer you the best possible communication.
Further information on data processing by YouTube can be found in YouTube's privacy policy: https://policies.google.com/privacy
Data processing on our TikTok account
We use the platform and services of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (hereinafter ‘TikTok’) for the content we publish. When you visit our TikTok account or interact with our content, TikTok processes various personal data, such as your IP address, interaction data (likes, comments, shared content) and usage data (videos viewed, length of stay). This data is used to provide us with anonymised statistics on the use of our TikTok content, to analyse the reach of our posts and to optimise our content. This data is processed on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR in order to improve our social media presence and better understand our target groups.
TikTok itself processes your data in accordance with its own privacy policy, over which we have no influence. For more information on data processing by TikTok, please refer to TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy
3.2 Use of payment service providers
PayPal
If you choose to pay via PayPal, the payment will be processed by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter ‘PayPal’). As part of this payment process, personal data will either be transmitted to PayPal or from PayPal to us
If you select PayPal as your payment method, we will transfer certain personal data to PayPal in order to execute the payment, in particular the invoice amount and other information necessary for payment processing. This data is processed on the basis of Art. 6 (1) (b) GDPR, as it is necessary for the performance of the contract. In addition, we have a legitimate interest in using a secure and efficient payment system, so that processing is carried out in accordance with Art. 6 (1) (f) GDPR.
In order to enable payment, PayPal may in turn transfer personal data to us, in particular your name, your billing and delivery address and, if necessary, other information required for the execution of the purchase contract. This data processing is also carried out on the basis of Art. 6 (1) lit. b GDPR.
As the operator of this website, we do not receive complete payment details such as credit card numbers or bank details from PayPal. Instead, we only receive confirmation of the payment status (successful or failed), a transaction ID and, if applicable, a reference to fraud checks or chargebacks from PayPal. We process this information for the purpose of performing the contractual relationship in accordance with Art. 6 (1) lit. b GDPR.
PayPal also reserves the right to process personal data for identity and credit checks and for fraud prevention. To this end, PayPal may pass on the data to affiliated companies, payment service providers or credit agencies. It is possible that personal data may also be transferred to third countries outside the European Union or the European Economic Area in this context. In such cases, PayPal ensures that appropriate safeguards are in place in accordance with Art. 46 GDPR, for example by concluding standard contractual clauses of the European Commission.
Further information on data processing by PayPal and your rights and settings options can be found in PayPal's privacy policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Stripe
When you make a payment on our website, the payment is processed by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (hereinafter ‘Stripe’). In this context, your personal data will be processed in order to carry out the payment transaction.
When you make a payment via Stripe, the data required for the transaction, in particular payment information such as your credit card or account details, your IP address and other information necessary for payment processing, is transmitted directly to Stripe. As the website operator, we do not receive complete payment details such as credit card numbers or bank details, but only a payment confirmation or an error message from Stripe. This data is processed for the purpose of fulfilling the contractual relationship in accordance with Art. 6(1)(b) GDPR. In addition, we have a legitimate interest in using a secure and efficient payment system, so that processing is also carried out on the basis of Art. 6(1)(f) GDPR.
Stripe may use the transmitted data for fraud prevention and identity and credit checks and may pass it on to affiliated companies, banks, payment service providers or credit agencies for this purpose. In this context, data may also be transferred to third countries outside the European Union or the European Economic Area. In such cases, Stripe ensures that appropriate safeguards are in place in accordance with Art. 46 GDPR, for example by concluding standard contractual clauses of the European Commission.
For more information about data processing by Stripe, your rights and settings options, please refer to Stripe's privacy policy at: https://stripe.com/de/privacy
4. Data processing when using our website
When you access our website, your internet browser automatically transmits the following data to our web server for technical reasons:
• IP address
• Date and time of the server request
• URL of the file accessed
• Amount of data transferred
• Operating system
• Information about the browser type and version used
• Name of the internet provider
• Website from which this website was accessed
• Page visited on our website
The above data is collected, processed and used for the purpose of enabling the use and delivery of our website. Further purposes are the security of our IT systems and technical administration. The legal basis for processing is Art. 6 (1) lit. f GDPR, whereby our legitimate interest arises from the above-mentioned purposes.
If you decide to use our contact form, your details will be used exclusively for the purpose of processing your enquiry and performing any services you may have requested via this form. We only collect and process further or other personal data if you use certain services and we require your data for this purpose, or if you have given us your express consent. For example, by filling out a corresponding form, sending us an email, ordering services or sending us enquiries. The legal basis for processing is Art. 6 (1) lit. b GDPR and Art. 6 (1) lit. f GDPR.
Data processing when using our online shop
When you access our website, your internet browser automatically transmits certain data to our web server for technical reasons. This includes your IP address, the date and time of the server request, the URL of the file accessed, the amount of data transferred, information about your operating system, information about the type and version of browser you are using, the name of your internet service provider, the website from which you accessed our website, and the pages you visited on our website. This data is processed solely for the purpose of providing and delivering the website content and ensuring the security and stability of our IT systems. Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
When you use our online shop, we also collect personal data if you actively provide it during the ordering process or in connection with another enquiry. This applies in particular to data such as your name, contact details, delivery and billing address, and payment information, which is required to process your order. This data is processed for the purpose of fulfilling the contractual relationship in accordance with Art. 6 (1) (b) GDPR. If you also create a customer account, the data you provide will be stored to enable you to use the shop more conveniently and to manage future orders. The legal basis for this is your consent in accordance with Art. 6 (1) (a) GDPR.
If you use our contact form or contact us in any other way, your details will be used exclusively for processing your enquiry. In cases where this is necessary, we also process your data to enforce our legitimate interests, such as to assert or defend legal claims. The legal basis for this is Art. 6 (1) lit. f GDPR.
Essential cookies and services for website operation
Essential cookies are necessary to ensure the basic functionality of our website and to enable its operation. Processing is based on our legitimate interest in the basic provision of our website. The legal basis is Art. 6 (1) f GDPR. Without these cookies, our website cannot function. These cookies can only be deactivated in the browser settings.
Data processing in connection with the cookie management tool
This website uses a cookie consent management system. This system is used to obtain and document the legally required consent for the use of technically non-essential cookies and comparable technologies.
When the website is accessed, a corresponding consent cookie is stored in the user's browser, in which the respective consents granted or their revocation are stored. The information collected in this way is processed exclusively locally in the browser and is not transmitted to the provider of the consent tool or to third parties.
Processing is based on our legitimate interest in ensuring that our website complies with legal requirements and in fulfilling our legal obligations to provide evidence in accordance with Art. 6(1)(f) GDPR in conjunction with Art. 6(1)(c) GDPR.
Cookies and services that are not technically necessary
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘Google’). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. We have activated IP anonymisation. On this website, your IP address will therefore be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. Google uses the information collected to evaluate the use of the website, to compile reports on this and to provide us with other services related to this. The processing and evaluation of the data is based on our legitimate interest in optimising our website and our offers. The legal basis is Art. 6 (1) lit. f GDPR or your consent by accepting all cookies in my cookie banner (legal basis Art. 6 (1) lit. a GDPR).
Further information on data processing by Google and your rights can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245
Hotjar
This website uses Hotjar, a service provided by Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta (hereinafter referred to as ‘Hotjar’). Hotjar helps us to analyse user behaviour and improve the user-friendliness of our online offering. By evaluating interactions, mouse movements, clicks and scrolling behaviour, we gain valuable insights into how visitors use our website, which areas are particularly popular and where there may be room for improvement.
Hotjar uses cookies and similar technologies to create pseudonymised usage profiles. Among other things, data about your device, your browser, your approximate geographical origin (based on anonymised IP address), your usage behaviour on our website and technical details about your usage are collected. Hotjar stores this information exclusively in pseudonymised form, thus preventing the direct identification of individual persons. This data is processed either on the basis of our legitimate interest in analysing and optimising our website in accordance with Art. 6 (1) (f) GDPR or – if you have expressly consented via our cookie banner – on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Hotjar hosts all collected data within the European Union and complies with the data protection provisions of the GDPR. Further information on data processing by Hotjar can be found in Hotjar's privacy policy at: https://www.hotjar.com/legal/policies/privacy/
Facebook Pixel
Responsible provider:
Facebook Ireland Ltd.
4 Grand Canal Square
Dublin 2, Ireland
Facebook Pixel is an analysis tool offered by Facebook that is used to measure the effectiveness of advertising measures on Facebook. It collects information about the use of the website, such as pages visited, interactions or purchases. This data can be linked by Facebook to the user's Facebook account and is used to improve advertising campaigns. The transfer of data to third parties cannot be ruled out. The legal basis for the processing of your data is Art. 6 (1) (a) GDPR through your consent in the cookie banner and Art. 6 (1) (f) GDPR due to the legitimate interest in the analysis and optimisation of our website. You have the right to object to the processing of your data.
Personal data may be transferred to the United States or other third countries. In this case, the provider provides appropriate safeguards in accordance with Art. 44 GDPR to ensure an adequate level of data protection.
For more information about data processing by Facebook and your rights, please refer to Facebook's privacy policy: https://www.facebook.com/privacy/explanation
5. Data transfer to third parties and external recipients
In certain cases, we are legally obliged to transfer data to a requesting government agency, e.g. within the framework of national legislation. The legal basis for processing is Art. 6 (1) (c) GDPR. When involving service providers in the context of data processing on behalf of us, we comply with the data protection provisions pursuant to Art. 28 GDPR and Art. 44 ff. GDPR.
Furthermore, we only pass on data to third parties if you have expressly consented to this, if the transfer is clearly necessary to perform a service requested by you (e.g. involvement of a shipping service provider) or if the transfer is required by law.
In the event of a transfer of personal data to countries outside the EU or the EEA, we take all necessary steps to ensure that appropriate measures are taken to protect your personal data in accordance with data protection regulations, e.g. application of the standard contractual clauses approved by the EU Commission.
For the purpose of delivering ordered goods, we pass on your personal data to the shipping service provider commissioned by us, insofar as this is necessary for delivery. The data transmitted usually includes your name, your delivery address and, if necessary, your contact details for coordinating delivery dates or details.
The legal basis for the processing and transfer of your data is Art. 6 (1) lit. b GDPR, as the transfer is necessary for the performance of the contract. In cases where your contact details are transferred to the shipping service provider for the purpose of delivery notification or coordination, the processing is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in order to ensure smooth delivery.
6. Use of data, communication and marketing
Surveys and advertising for similar products
To ensure that our service meets your requirements, we may use your email address, which you provide when making an enquiry, placing an order or in connection with the use of our free offers, for customer satisfaction surveys. As a customer, we may send you advertising by email for similar products, such as services you have ordered or used from us in the past, even without your prior consent. The legal basis for processing is our legitimate interest in improving our services (Art. 6(1)(f) GDPR).
You can object to future use by sending a message to the above contact details or, in the case of a newsletter, by using the unsubscribe link contained therein.
Newsletter registration
When you subscribe to our newsletter, we process the personal data you provide in order to send you regular information about our offers, products, services or relevant news. The personal data processed includes, in particular, your email address and, depending on the information provided, your name or other voluntarily provided information used to personalise the newsletter.
Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR, which you give by actively registering, and on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR in optimising our offering and our communication with you.
We use the double opt-in procedure for registration for our newsletter. After registering, you will receive a confirmation email asking you to confirm your registration by clicking on a link. This procedure serves to ensure that no unauthorised third parties can register your email address for the newsletter. The double opt-in procedure (time of registration and confirmation, IP address) is logged in order to fulfil our legal obligations to provide evidence.
You can revoke your consent to the processing of your personal data for the purpose of sending the newsletter at any time. To do so, you can use the unsubscribe link included in every newsletter, for example. The revocation does not affect the legality of the processing of your data that has taken place up to that point.
7. Use of Impressum-Privatschutz (IP Management)
We use the services of IMPRESSUM-PRIVATSCHUTZ GmbH, Ludwig-Erhard-Str. 18, 20459 Hamburg, to manage the mail sent to us. This service provider offers a secure and reliable postal address for our project (e.g. legal notice, privacy policy, cancellation policy and other areas, if applicable). This also represents our legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. We have concluded a contract with Impressum-Privatschutz for order processing and fully implement the strict requirements of the German data protection authorities when using this service. Further information on data protection at Impressum-Privatschutz GmbH can be found here: https://impressum-privatschutz.de/datenschutzerklaerung/
8. Data storage period
We store personal data until you revoke your consent or the data is no longer required to fulfil our business interests or to provide the service you have requested, or until this is required by law.
9. Data security
We attach great importance to the protection of your personal data and have therefore implemented technical and organisational measures (TOMs) to ensure an appropriate level of protection in accordance with legal requirements, in particular the General Data Protection Regulation (GDPR). These measures serve to ensure the confidentiality, integrity and availability of the data processed by me and to protect it from unauthorised access, loss, destruction or manipulation.
The technical and organisational measures are adapted to the state of the art as necessary in order to continue to ensure the protection of your data.
10. Your rights as a data subject
You have the right to request information about the purpose, scope, origin and recipients of your stored personal data at any time and free of charge (Art. 15 GDPR). In addition, you have the right to request the correction of inaccurate or incomplete data (Art. 16 GDPR).
In accordance with data protection regulations, you also have the right to have your personal data deleted if the requirements of Art. 17 GDPR are met (right to be forgotten), as well as the right to restrict the processing of your personal data in accordance with Art. 18 GDPR. In addition, you have the right to object to the processing of your personal data at any time (Article 21 GDPR) if this is based on Article 6(1)(e) or (f) GDPR. This applies in particular to the processing of your data for direct marketing purposes.
Furthermore, you have the right to data portability, i.e. you can receive the personal data you have provided to us in a structured, commonly used and machine-readable format or request that this data be transferred to another controller, provided that the requirements of Art. 20 GDPR are met.
If you believe that the processing of your personal data violates data protection regulations or that your rights have been violated in any other way, you have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.
Furthermore, you have the right to revoke your consent to the processing of your personal data at any time with future effect, for example by sending an informal notification by email or in writing to the above contact details (Art. 7(3) GDPR). This does not affect the lawfulness of the processing carried out on the basis of your consent until the time of revocation.
Source: Impressum-Privatschutz