1) Introduction and Contact Details of the Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data means all data by which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Robert Reusrath
Reusrath & Söhne
Knaackstraße 10
10405 Berlin
Germany
Phone: +49 176 38951098
Email: fenech1873@gmail.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1

When using our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the server (so-called server log files). When you access our website, we collect the following data that is technically necessary to display the website to you:

• Visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable, in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

2.2

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

For hosting our website and displaying the page content, we use a provider that performs its services itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider that ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called session cookies), while others remain on your device for longer and enable page settings to be saved (so-called persistent cookies).

In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

If personal data is also processed through individual cookies used by us, the processing takes place in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of granted consent, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.

You can configure your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for specific cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting Us

When contacting us (e.g. via contact form or email), personal data is processed solely for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that no statutory retention obligations oppose this.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for account opening can be seen from the input form on our website.

Deletion of your customer account is possible at any time and can be requested by sending a message to the above-mentioned controller. After deletion of your customer account, your data will be deleted provided that all contracts concluded through it have been fully processed, no statutory retention periods oppose this, and we have no legitimate interest in further storage.

7) Use of Customer Data for Direct Advertising

7.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally.

We use the double opt-in procedure for newsletter dispatch, ensuring that you only receive newsletters after you have expressly confirmed your consent by clicking a verification link sent to the specified email address.

By activating the confirmation link, you grant us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. We store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your email address at a later time.

You may unsubscribe from the newsletter at any time via the designated link in the newsletter or by notifying the controller named above.

7.2 Brevo

Our email newsletters and other promotional email communications are sent via:

Brevo GmbH

Based on our legitimate interest in effective and user-friendly email marketing, we transfer the data you provided during registration to this provider in accordance with Art. 6(1)(f) GDPR.

We reserve the right, solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, to carry out statistical success evaluations of email campaigns by means of web beacons or tracking pixels.

We have concluded a data processing agreement with the provider.

7.3 Product Availability Notification by Email

For temporarily unavailable items, you may subscribe to email notifications regarding product availability. We will send you a one-time email once the selected item becomes available.

The only mandatory information required is your email address.

We use the double opt-in procedure for this service as well.

You may unsubscribe from availability notifications at any time by notifying us.

8) Data Processing for Order Processing

8.1 Transmission of Image Files by Email

On our website, customers may submit image files by email for product personalization. The submitted image is used solely as a template for the personalization of the selected product.

The transmitted files are collected, stored and used exclusively for producing the personalized product.

After completion of the order, the transmitted image files are automatically and completely deleted.

8.2 Order Fulfilment

To the extent necessary for delivery and payment processing, personal data collected by us is passed on to the commissioned transport company and the commissioned financial institution pursuant to Art. 6(1)(b) GDPR.

8.3 Payment Service Providers

Depending on the selected payment method, data may be transmitted to the respective payment provider.

Possible providers include:

• Amazon Pay
• Apple Pay
• Google Pay
• Klarna Bank AB
• PayPal
• Ratepay GmbH
• Sofort

Processing is carried out in each case pursuant to Art. 6(1)(b) GDPR for payment processing and, where applicable, pursuant to Art. 6(1)(f) GDPR for creditworthiness checks.

9) Web Analytics Services

Matomo

This website uses the web analytics service:

Matomo by InnoCraft Ltd.

The service collects and stores pseudonymized visitor data, including information about the device used such as IP address and browser information.

Cookies may be used for this purpose.

All processing operations described above are only carried out if you have given your express consent pursuant to Art. 6(1)(a) GDPR.

You may revoke your consent at any time with future effect via the cookie consent tool provided on the website.

For data transfers to New Zealand, an adequacy decision of the European Commission applies.

10) Rights of the Data Subject

You have the following rights under applicable data protection law:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to notification (Art. 19 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to Object

If we process your personal data on the basis of legitimate interests, you have the right to object at any time for reasons arising from your particular situation.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing.

11) Storage Duration of Personal Data

The duration of storage of personal data depends on the respective legal basis, the purpose of processing and, where applicable, statutory retention periods.

If data is processed on the basis of consent pursuant to Art. 6(1)(a) GDPR, it will be stored until you revoke your consent.

If data is processed for contractual purposes pursuant to Art. 6(1)(b) GDPR, it will be deleted after expiry of statutory retention periods unless further storage is necessary.

If data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, it will be stored until you exercise your right to object, unless overriding legitimate grounds exist.

Otherwise, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Note: This privacy policy is regularly updated by IT-Recht Kanzlei.