Table of Contents

1. Information on the Collection of Personal Data and Contact Details of the responsible person
2. Contacting
3. Processing of Data for the Purpose of Order Handling
4. Rights of the Data Subject
5. Duration of Storage of Personal Data
6. Reference to the Shopify data protection declaration

§1    Information on the Collection of Personal Data and Contact Details of the responsible person

1.1          In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2          The responsible person in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ausgefuchst Art - Sabrina Ulbrich, c/o MDC Management#187, Welserstraße 3, 87463 Dietmannsried, Germany, E-Mail: ausgefuchstart@outlook.de, contact form. The responsible person in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

§2    Contact

In the context of contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided that there are no legal storage obligations to the contrary.

§3    Processing of Data for the Purpose of Order Handling

3.1          The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment handling. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b GDPR.

3.2          By submitting the order, the Client declares his consent that the personal data required for the delivery of the goods and the Client‘s specified e-mail address will be transmitted to the transport company. If it is not their own e-mail address, the Client must obtain the consent of the respective owner. Further information on shipping can be found in the shipping information.
The data protection declarations of the transport companies and partners used are available here:
Deutsche Post DHL Group: https://www.dhl.de/de/geschaeftskunden/paket/information/datenschutz-gkp.html
Deutsche Post: https://www.deutschepost.de/de/f/footer/datenschutz.html#
UPS: https://www.ups.com/de/de/help-center/legal-terms-conditions/privacy-notice.page?
Packlink: https://pro.packlink.de/datenschutz/

3.3          When paying by any payment method via Shopify Payments, we pass your payment data on to Shopify (Shopify International Limited, Victoria Buildings, 2. Etage, 1-2 Haddington Road, Dublin 4, D04 XN32, Irland) as part of the payment processing. The transfer takes place in accordance with Art. 6 (1) point b GDPR and only insofar as necessary for payment processing.

3.4          When paying by any payment method via PayPal, we pass your payment data on to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 (1) point b GDPR and only insofar as necessary for payment processing.

§4    Rights of the Data Subject

4.1          The applicable data protection law grants you comprehensive rights of data subjects (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:
4.1.1         Right to information in accordance with art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if we have not collected them from you, the existence of automated decision-making including profiling and, if necessary, meaningful information about the logic involved and the scope and the intended effects of such processing, as well as your right to be informed about the guarantees in accordance with art. 46 GDPR when your data is forwarded to third countries;
4.1.2         Right to correction in accordance with art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and / or completion of your incomplete data stored by us;
4.1.3         Right to deletion in accordance with art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of art. 17 paragraph 1 GDPR are met. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
4.1.4         Right to restriction of processing in accordance with art. 18 GDPR: You have the right to request that the processing of your personal data be restricted as long as the correctness of your data is being checked, if you reject deletion of your data due to inadmissible data processing and instead the Request restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have objected to reasons of your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh;
4.1.5         Right to information in accordance with art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, the person responsible is obliged to notify all recipients to whom the personal data relating to you has been disclosed, this correction or deletion of the data or notification of the restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
4.1.6         Right to data portability in accordance with art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible, insofar as this is technically feasible;
4.1.7         Right to revoke consent given in accordance with art. 7 paragraph 3 GDPR: You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data concerned immediately, provided that further processing cannot be based on a legal basis for processing without consent. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal;
4.1.8         Right to lodge a complaint in accordance with art. 77 GDPR: If you are of the opinion that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement.

4.2          Right of Objection

4.2.1         If we process your personal data on the basis of our overriding legitimate interest within the scope of a weighing of interests, you have the right at any time to object to this processing with effect for the future for reasons arising from your particular situation.
4.2.2         If you make use of your right of objection, we will stop processing the data concerned. However, we reserve the right to revise the data if we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
4.2.3         If your personal data are processed by us in order to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above.
4.2.4         If you make use of your right of objection, we will stop processing the data concerned for direct marketing purposes.

§5    Duration of Storage of Personal Data

5.1          The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).

5.2          When processing personal data on the basis of express consent in accordance with Article 6 (1) (a) GDPR, this data is stored until the person concerned revokes his or her consent.

5.3          If there are statutory retention periods for data that are processed in the context of legal or similar obligations on the basis of Art. 6 Para. 1 lit. b GDPR, these data are routinely deleted after the retention periods have expired, provided they are no longer for contract fulfillment or contract initiation are required and / or we have no legitimate interest in further storage.

5.4          When processing personal data on the basis of art. 6 paragraph 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection under art. 21 paragraph 1 GDPR, unless we can have compelling reasons worthy of protection prove for the processing that the interests, rights and freedoms of the data subject outweigh, or the processing serves to assert, exercise or defend legal claims.

5.5          When processing personal data for the purpose of direct advertising on the basis of art. 6 paragraph 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection under art. 21 paragraph 2 GDPR.

5.6          Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

§6    Reference to the Shopify data protection declaration

The Shopify platform is responsible for all further data processing that goes beyond the data processing described above. For more information on Shopify's privacy policy, see Shopify's privacy policy: https://www.shopify.de/legal/datenschutz