The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal provisions (DSGVO, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing within the framework of our website.

Contacting us
If you contact us using the form on the website or by e-mail, the data you provide will be stored by us for six months for the purpose of processing the request and in case of follow-up questions. We will not pass on this data without your consent.

Data storage
We would like to point out that for the purpose of simplifying the shopping process and for the subsequent processing of the contract, the IP data of the connection owner are stored by the webshop operator within the framework of cookies, as well as the name and address of the buyer.

In addition, for the purpose of contract processing, the following data will also be stored by us: Name, address, email etc. The data provided by you are necessary for the fulfillment of the contract or for the implementation of pre-contractual measures. Without this data, we can not conclude the contract with you. No data is transferred to third parties, with the exception of the transfer of credit card data to the processing banking institutions / payment service providers for the purpose of debiting the purchase price, to the transport company / shipping company commissioned by us to deliver the goods, and to our tax advisor to fulfill our tax obligations.

We assure you that we will not pass on your personal data to third parties unless we are legally obliged to do so or you have expressly consented to this beforehand. Insofar as we use the services of third parties to carry out and handle processing operations, we will comply with the provisions of the Data Protection Act. The personal data that you provide to us when placing an order or by email (e.g. name, contact details) will only be processed for correspondence with you and only for the purpose for which you provided us with the data.

After cancellation of the purchase process, the data stored by us will be deleted. In the event that a contract is concluded, all data from the contractual relationship will be stored until the expiry of the retention period under tax law. The data processing is based on the legal provisions of §96 para 3 TKG and Art 6 para 1 lit a (consent) and / or lit b (necessary for the performance of the contract) of the DSGVO.

Our webshop is hosted on the e-commerce platform of Shopify (Shopify Inc., Waterloo, ON, Canada). We have concluded a (standard) contract with Shopify for commissioned data processing. When you create a user account or make a purchase in our webshop, you disclose personal information that is forwarded to Shopify's servers and stored and processed there. These servers are located in the USA and Canada.

What data is involved?

Information about the use of personal data can be found at Shopify on the following page:

https://www.shopify.com/legal/privacy

Point 3 lists what information Shopify stores (translated from English):
What information we collect and why: We collect the name, email address, shipping and billing address, payment information, company name, phone number, IP address and device data of our merchants' customers. We need this information to provide our merchants with our services, which include supporting and processing orders, authentication, and processing payments. We also use this information to improve our service offerings.

When do we collect this information?
Informationiscollected when customers of our merchants use or access our services, such as when a customer visits a merchant's website, places an order, or registers a user account on a merchant's website. [End of translation]

In summary: You only have to and can enter the usual information in our webshop that is mandatory for a purchase, i.e. name, email address, address, etc.

Cookies
Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage. We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit.

If you do not wish this, you can set your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If you disable cookies, the functionality of our website may be limited.

Newsletter
You have the option to subscribe to our newsletter via our website. For this we need your email address and your declaration that you agree to receive the newsletter. In order to provide you with targeted information, we also collect and process voluntarily provided information on areas of interest, birthday and zip code [...].

As soon as you have registered for the newsletter, we will send you a link by email to confirm your registration. You can cancel your newsletter subscription at any time. To do so, simply click on "unsubscribe" at the bottom of a newsletter email from us. We will then immediately delete your data in connection with the newsletter dispatch.

We use Mailchimp as our marketing platform. By subscribing to our newsletter, you acknowledge that your information will be sent to Mailchimp for processing. To learn more about Mailchimp's privacy practices, please visit here.

OneSignal Push Notification

When you visit our websites, we ask you with a screen message whether we may alert you to news in the future with messages sent by your browser (push notifications). The consent is given for the browser in which you have logged in. If you agree, you will receive push notifications from our website at regular intervals. By clicking on them, you will be taken directly to the advertised website and/or promotion. You have the option to unsubscribe from the push notifications at any time if you no longer wish to receive them. This is possible directly with each push notification delivered (browser-dependent) or on our website as well as in the general browser/system settings (depending on browser/system).

For the implementation, we use the technology of the provider OneSignal, 201 San Antonio Circle Suite #140, Mountain View, CA, USA. You can find the provider's privacy information here: https://onesignal.com/privacy_policy. In order to send you the push notifications, it is necessary that non-personal data, such as a message, is transmitted to the server of OneSignal. It is necessary that a non-personal ID is assigned to uniquely assign the device, which does not allow OneSignal to draw conclusions about the person.

OneSignal may also place cookies on your terminal device if you have consented to the use and storage of third-party cookies. The use of the service has the purpose of facilitating the processing of requests and the provision of our website. The legal basis regarding the use of cookies is Art. 6 para. 1 sentence 1 letter a DSGVO, as the data processing in this regard is based on your consent. In addition, the legal basis is Art. 6 para. 1 p. 1 letter f DSGVO, as we have a legitimate interest in processing requests voluntarily addressed to us.

The data will be deleted as soon as they are no longer required for our recording purposes or for processing your request. In our case, this is usually the case after 90 days. You can revoke your consent to the storage and use of cookies by OneSignal by deactivating "third-party cookies" or technically deactivating them in the settings of your browser or by means of browser add-ons; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

OneSignal has committed to compliance with the EU-US Privacy Shield Agreement between the EU and the US regarding the collection, use and storage of personal data from EU member states by obtaining EU-US Privacy Shield certification from the US Department of Commerce. For more information about OneSignal and OneSignal's privacy practices, please visit https://onesignal.com/privacy_policy.

Security

Your personal data is transmitted securely by us through encryption. This also applies to your order and the customer login. We use the coding system TLS (Transport Layer Security) or SSL (Secure Socket Layer). Furthermore, we secure our websites and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

Exercise of your rights

You can contact us at any time at contact@quipster.eu to exercise your rights.

The rights that are guaranteed to you are:

- Access
- Correction
- Retention
- Objection
- Erasure
- Restriction of data processing
- Portability

In any case, the exercise of the listed rights is free of charge.