Privacy Policy
Below we inform you about the type, scope, and purpose of the processing of your personal data when using our shop at "www.rockabillymode.de." Personal data is all information relating to an identified or identifiable natural person.
1. Person responsible
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. The controller for the personal data processed in this shop within the meaning of the GDPR is: Andrea Ewers Schneidermeisterbetrieb, Tonhallenstraße 11a, 47051 Duisburg, Telephone 49 (0) 203 31879988, Email rockabillymode@web.de (hereinafter "we").
2. When you visit our website
When you visit our website, our server collects the following information from your device: browser type and version, operating system, the previously visited website (“referrer”), IP address and time of page access.
We collect and process this data to ensure the smooth operation of our website and to detect, prevent, and prosecute any misuse of our services. Furthermore, we use the collected data for statistical purposes, for example, to evaluate which devices and browsers are used to access our shop, in order to continuously adapt and improve our offering to user needs. This data processing is based on Article 6 (1) (f) GDPR.
We delete all of the above-mentioned personal data no later than twelve months after it was collected.
3. When you order from us
When you place an order in our store, we process your name, delivery address, and email address as you provide them during the ordering process. If you voluntarily provide additional information with your order (e.g., a different billing address or telephone number), we also process this data.
We process this data electronically for the proper fulfillment of the contract, in particular for delivery, invoicing, recording payments, and processing returns and complaints. If we are obligated to provide you with updates for a digital product or for goods with digital elements, we will also process your contact details for this purpose. This data processing is based on Article 6 (1) (b) GDPR.
We will retain this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.
For a contract to be concluded between you and us, we require your name, delivery address, and email address. The requirement to provide this data arises from legal regulations (e.g., Section 312i Paragraph 1 Item 3 of the German Civil Code (BGB), Section 14 Paragraph 4 of the German Value Added Tax Act (UStG). Therefore, without providing this data, you cannot conclude a contract with us.
When deciding whether to conclude a contract, we do not use automated decision-making or profiling.
4. Delivery and payment
If we send physical goods under the purchase contract, we will transmit the name and address of the recipient and, if you have consented to this, your email address to Deutsche Post (Deutsche Post AG, 53113 Bonn), DHL (DHL Paket GmbH, 53113 Bonn) or DPD (DPD Deutschland GmbH, 63741 Aschaffenburg) as the shipping service provider for the purpose of delivering the shipment, if necessary including a prior email notification of the expected delivery time, and for the purpose of a possible return of your shipment to us on the basis of Article 6 (1) (b) GDPR.
To pay for your purchase, the payment service provider you choose collects and processes your name, email address, card or account number, and/or other data, as required for the payment method you choose. The contractual and data protection provisions of the payment service provider you choose also apply.
When we receive a payment, we process the data that the payment service provider sends us.
When we receive a transfer to our account, we process in particular the name of the transferring account holder, the account number (IBAN and BIC) and the intended purpose provided.
Processing is based on Article 6, paragraph 1, letter b, GDPR. We retain this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods to which we are subject under commercial and tax law have expired.
5. Processor
For the operation of our website on the Internet, we use the technical services of online-Forum GmbH Ikarusstraße 24 40474 Düsseldorf as a processor in accordance with Article 28 GDPR.
6. Contact
If you use a contact form or chat function on our website, we process the data you enter; this may include your message, your name, and your email address.
If you send us a message by email, we will save your message along with the sender information transmitted with it (name, email address, and any other information added by your email program and the transmitting servers). To receive, store, and send emails, we use an email provider that acts as a processor for us in accordance with Article 28 of the GDPR.
The legal basis for this data processing is our legitimate interest in answering your message and responding to any follow-up questions you may have (Article 6 (1) (f) GDPR). We will delete the data collected with your message no later than twelve months after the last communication with you regarding your request, subject to the provisions in the following paragraph.
If you send us a legally relevant declaration relating to the contractual relationship (e.g., a revocation or a complaint), the legal basis for processing, regardless of the method of transmission, is also Article 6, Paragraph 1, Letter b of the GDPR. In such a case, we will delete the data associated with your declaration as soon as all mutual claims arising from the contractual relationship have been finally settled and the retention periods under commercial and tax law have expired.
7. Newsletter
If you subscribe to our newsletter, we will inform you by email about new offers and features in our shop. You will not receive more than one newsletter per week. You can withdraw your consent to the use of your email address for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates.
This data processing is based on your consent in accordance with Article 6, Paragraph 1, Letter a of the GDPR. If you revoke your consent to the use of your email address for advertising purposes, we will delete your email address from our newsletter distribution list.
As a technical service provider for sending our newsletter, we use the service of Newsletter2Go GmbH, address: Köpenicker Str. 126, 10179 Berlin (contract processor according to Article 28 GDPR).
8. Social Media
Social media buttons may be displayed in our shop; they can be identified by the logos of the social media platforms (hereinafter "platforms") (Facebook: "f" logo, Twitter: bird silhouette, Instagram: square camera, Pinterest: "p", Google : "g "). These are links to the respective platforms based in the USA. Clicking on such a link calls up the website of the respective platform, whereby the IP address of the calling device and the address of the page from which the link is made ("referrer") are transmitted to the called platform in the USA. However, we do not collect or process any data ourselves in connection with the social media buttons.
9. Your rights
You have the following rights with regard to the personal data we process about you:
You have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, we will inform you of the personal data stored about you and the other information in accordance with Article 15 (1) and (2) GDPR.
You have the right to have inaccurate personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of providing a supplementary statement.
You can request that we immediately delete the personal data concerning you under the conditions of Article 17 (1) GDPR, unless their processing is necessary pursuant to Article 17 (3) GDPR.
You can request that we restrict the processing of your data if one of the conditions set out in Article 18, Paragraph 1 of the GDPR is met. In particular, you can request restriction instead of deletion.
We will notify any rectification or erasure of your personal data, or any restriction of processing, to all recipients to whom we have disclosed your personal data, unless doing so proves impossible or involves disproportionate effort. We will also inform you about these recipients upon your request.
You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format and may request that we transmit this data to another controller without hindrance, where technically feasible.
If data processing is based on your consent, you have the right to revoke your consent at any time. Revoking your consent does not affect the legality of the data processing that has taken place up to the time of your revocation.
RIGHT OF OBJECTION: FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, YOU MAY OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME. This right of objection applies to data processing carried out on the basis of Article 6 (1) (f) GDPR to protect our or a third party's legitimate interests, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail. If you exercise your right of objection, we will no longer process the data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves to assert, exercise, or defend legal claims.
IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING (E.G. NEWSLETTERS), YOU CAN OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING, WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.
If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. This does not preclude other administrative or judicial remedies.