The present Privacy Policy is an integral part of the Terms and Conditions offered by the bathwonder.uk and the buyer.
General Provisions
Controller
The controller within the meaning of Art. 5 lit. j of the Data Protection Act (DSG) and Art. 19 ff. DSG is:
thewondertowel.com
Email: kontakt@Lamiso.ch
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about the handling of your personal data when using our website. Personal data refers to all data that can be used to personally identify you.
1.2 The entity responsible for data processing on this website within the meaning of the Data Protection Act (DSG) is thewondertowel.com. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser's address bar.
1.4 By accepting the General Terms and Conditions (GTC) upon the conclusion of the contract, the visitor of the website consents to the processing of their personal data in accordance with Art. 6, Sec. 6 and 7 of the Data Protection Act (DSG). In addition to accepting the GTC, the contracting party is simultaneously informed about the processing of their personal data and the existence of this privacy policy in accordance with Art. 19 DSG.
1.5 The visitor of the website, whose personal data is processed within the meaning of Art. 5 lit. d of the Data Protection Act (DSG), has a right to information according to Art. 25 DSG and a right to data release or transfer. These rights can be exercised with the data protection officer in accordance with the general provisions mentioned above, unless an exception under Art. 26 or Art. 29 DSG applies.
2) DATA COLLECTION WHEN VISITING OUR WEBSITE
When you use our website for informational purposes only, meaning you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used
Upon concluding a contract, the processing of your personal data is carried out based on Art. 6 Sec. 3 DSG for the purpose of improving the stability and functionality of our website as well as for the purpose of contract fulfillment. Data will be shared with third parties within the scope of contractual obligations. In particular, data may be shared with third-party companies such as suppliers or payment institutions. Additionally, the subsequent review of server log files is reserved in case there are concrete indications of unlawful use.
The processed data will be deleted as soon as it is no longer needed for the processing purpose (Art. 6 Sec. 4 DSG).
3) HOSTING & CONTENT DELIVERY NETWORK
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for hosting and displaying our online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's services, data may also be transmitted for further processing on our behalf to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. For the transmission of data to Shopify Inc. in Canada, an adequacy decision by the European Commission ensures an adequate level of data protection. Further information on Shopify's data protection can be found at the following website: https://www.shopify.de/legal/datenschutz.
Any further processing on servers other than those mentioned above by Shopify will only occur within the framework specified below.
4) COOKIES
To make visiting our website more attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings overview of your web browser. If any of the cookies we use also process personal data, the processing is carried out in accordance with Art. 6 Sec. 3 DSG either to fulfill the contract or to protect our interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
You can configure your browser to be notified about the setting of cookies and to decide individually on their acceptance, or to exclude the acceptance of cookies for certain cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) CONTACT
When you contact us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary, in accordance with Art. 6 Sec. 3 DSG. Your data will be deleted in accordance with Art. 6 Sec. 5 DSG once the purpose of processing is no longer relevant.
6) COMMENT FUNCTION
As part of the comment function on this website, in addition to your comment, the date and time of the comment's creation and the commentator name you choose are stored and published on this website. Furthermore, your IP address is stored for security reasons to allow identification of the author in the case of illegal comments. Your email address is saved for contacting you if a third party reports your published content as unlawful. beanstanden sollte.
7) USE OF CUSTOMER DATA FOR DIRECT ADVERTISING
The distribution of our email newsletters is handled through Shopify Email, a service provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), to which we transfer the data you provided during newsletter registration. This transfer is conducted in accordance with Art. 6 Sec. 3 DSG and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. The data you enter for receiving newsletters (e.g., email address) is generally stored on Shopify's servers in the EU.
As part of Shopify's services, data may also be further processed on our behalf and transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. For the transfer of data to Shopify Inc. in Canada, the adequacy decision by the European Commission ensures an adequate level of data protection.
Shopify uses this information to send and statistically analyze the newsletters on our behalf. For analysis purposes, the sent emails may contain web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine if a newsletter message has been opened and which links have been clicked. Technical information is also collected (e.g., time of retrieval, IP address, browser type, and operating system). The data is collected in a pseudonymized manner and is not linked with your other personal data, ensuring that no direct personal identification is possible. This data is used solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, Shopify may use this data according to Art. 6 Sec. 3 DSG for its own legitimate interest in tailoring and optimizing the service as well as for market research purposes, such as determining the countries of origin of the recipients. However, Shopify does not use the data of our newsletter recipients to contact them directly or to pass the data on to third parties.
We have concluded a data processing agreement with Shopify, which obliges Shopify to protect our customers' data and not to pass it on to third parties.
You can view Shopify's privacy policy here: https://www.shopify.de/legal/datenschutz
8) DATENVERARBEITUNG ZUR BESTELLABWICKLUNG
8.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data we collect will be transferred in accordance with Art. 6 Sec. 3 DSG to the assigned transport company and the assigned financial institution.
If we owe you updates for goods with digital elements or digital products based on a corresponding contract, we will process the contact data you provided at the time of ordering (name, address, email address) to inform you personally about upcoming updates within the legally prescribed period, in accordance with our legal obligations under Art. 19 et seq. DSG, via suitable communication channels (e.g., postal mail or email). Your contact data will be used strictly for notifications about the updates we owe you and will be processed by us only to the extent necessary for this purpose.
8.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We provide your name, delivery address, and, if necessary for delivery, your phone number, exclusively for the purposes of contract fulfillment in accordance with Art. 6 Sec. 3 DSG, to a shipping partner selected by us.
8.3 Use of Payment Service Providers
PayPal:
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if available—"purchase on account" or "installment payment" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer is made in accordance with Art. 6 Sec. 3 DSG and only to the extent necessary for payment processing.
For payment methods such as credit card via PayPal, direct debit via PayPal, or—if available—"purchase on account" or "installment payment" via PayPal, PayPal reserves the right to perform a credit check. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 Sec. 3 DSG based on PayPal's legitimate interest in assessing your creditworthiness. The results of the credit check, including the statistical probability of default, are used by PayPal to decide whether to provide the respective payment method. The credit report may include probability scores (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things, but not exclusively, address data. Further privacy information, including information about the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if it is necessary for the contractual payment processing.
Further privacy information can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Shopify Payments:
We use the payment service provider "Shopify Payments," 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered through Shopify Payments, the payment processing is carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transfer the information you provided during the ordering process along with your order information (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 Sec. 3 DSG. The transfer of your data is exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on the privacy practices of Shopify Payments can be found at: https://www.shopify.com/legal/privacy.
Privacy information regarding Stripe Payments Europe Ltd. can be found at: https://stripe.com/docs/privacy.
9) ONLINE-MARKETING
9.1 Facebook Pixel for Creating Custom Audiences (with Cookie Consent Tool)
Within our online offerings, we use the so-called "Facebook Pixel" provided by the social network Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
When a user clicks on one of our advertisements displayed on Facebook, the URL of our linked page is modified by the Facebook Pixel. If our site allows data sharing with Facebook via Pixel, this URL parameter is saved to the user's browser via a cookie, which is set by our linked page itself. This cookie is then read by the Facebook Pixel, enabling the data to be forwarded to Facebook.
The Facebook Pixel allows Facebook to identify visitors to our online offerings as a target audience for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display our Facebook Ads only to users who have shown interest in our online offerings or who exhibit certain characteristics (e.g., interests in specific topics or products determined by the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). We also aim to ensure that our Facebook Ads align with users' potential interests and do not appear intrusive. Additionally, we analyze the effectiveness of our Facebook Ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook Ad (so-called "Conversion").
The data collected is anonymized for us, meaning we cannot draw conclusions about users' identities. However, Facebook stores and processes the data, allowing it to link to individual user profiles and use the data for its own advertising purposes in accordance with Facebook's Data Usage Policy (https://www.facebook.com/about/privacy/). This data may enable Facebook and its partners to display ads on and off Facebook.
The data processing associated with the use of the Facebook Pixel is conducted solely with your consent in accordance with Art. 6 Sec. 6 DSG. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
9.2 Google Ads Conversion-Tracking
This website uses the online advertising program "Google Ads" and within Google Ads, the conversion tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to promote our attractive offers through advertising (known as Google Ads) on external websites. This allows us to evaluate the success of individual advertising measures and aim to show you relevant ads, make our website more interesting for you, and ensure fair billing for advertising costs.
The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files placed on your device. These cookies generally expire after 30 days and do not serve personal identification purposes. If the user visits certain pages of this website and the cookie has not expired, Google and we can determine that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Google Ads customers. The information collected via the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.
Using Google Ads may also involve transferring personal data to Google LLC servers in the USA.
For details on the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites, please refer to: Google Partner Sites Policies.
All described processing, especially setting cookies to read information from the device used, only takes place if you have given us your consent according to Art. 6 Sec. 6 DSG. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
To permanently object to the setting of cookies by Google Ads Conversion Tracking, you can download and install the browser plugin available at the following link: Google Ads Opt-Out Plugin.
To target users whose data we have obtained in the context of business or business-like relationships more effectively, we use a customer matching function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (mainly email addresses and phone numbers) electronically to Google. Google does not have access to clear data but automatically encrypts the information in the customer files using a special algorithm during the transmission process. Google can only use the encrypted information to match it to existing Google accounts created by the affected individuals. This enables the delivery of personalized ads across all Google services associated with the respective Google account.
Further information on Google's privacy measures regarding the customer matching function can be found here: Google Customer Match.
Google’s privacy policy can be viewed here: Google Privacy Policy.
10) RETARGETING/ REMARKETING/ REFERRAL ADVERTISING
Pinterest-Retargeting-Pixel
This website integrates a Pinterest Tag pixel from Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest")). The pixel allows us to collect, store, and analyze information about website visitors' browsing behavior in pseudonymized form. Pinterest can associate this information with additional data it has about the user, such as from their Pinterest account. Pinterest uses an algorithm to analyze browsing behavior and may then display targeted product recommendations as personalized ads on the user's Pinterest account.
Pinterest may also combine information collected via the pixel with other data it has from other websites and/or related to the use of the Pinterest social network to create pseudonymized user profiles. However, the collected information cannot be used to personally identify visitors to this website.
All the described processing, particularly setting cookies to read information from the device used, is only carried out if you have given us your consent according to Art. 6 Sec. 6 DSG. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
Pinterest-Tag Conversion-Tracking
This website utilizes the conversion tracking technology “Pinterest Tag” provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you arrive at our website from a Pin on Pinterest, we set a cookie on your device that interacts with a “Tag” implemented as a JavaScript code from Pinterest. Cookies are small text files placed on your device, which expire after 180 days and do not serve to personally identify you.
When a user is redirected from a Pinterest Pin to our website and the cookie has not yet expired, the Tag tracks certain predefined user actions (e.g., completed transactions, leads, searches on the website, product page views). When such an action occurs, your browser sends an HTTP request to Pinterest’s server through the Pinterest Tag, transmitting information about the action (including action type, timing, and browser type).
This transmission allows Pinterest to create statistics about user behavior on our website following a Pinterest Pin redirect, which helps us optimize our offerings. However, we do not receive any information that allows us to personally identify users.
All described processes, including setting cookies to read information from the device used, are only executed if you have granted us consent according to Art. 6 Sec. 6 DSG. You can withdraw your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
Snap Pixel (Snapchat)
This website uses the "Snapchat Pixel," a tracking technology from the social network Snapchat, operated by Snap Inc., 63 Market Street, Venice, CA 90291, USA ("Snapchat").
If you arrive at our website from an advertisement on Snapchat, we set a cookie on your device that interacts with a JavaScript code implemented by Snapchat. Cookies are small text files placed on your device.
When a user is redirected from a Snapchat ad to our website, the Pixel tracks certain predefined user actions (e.g., completed transactions, leads, searches on the website, product page views). When such an action occurs, your browser sends an HTTP request to Snapchat’s server through the Snapchat Pixel, transmitting information about the action (including action type, timing, and browser type).
This data transmission allows Snapchat to generate statistics about user behavior on our website following a Snapchat ad, which helps us optimize our offerings. However, we do not receive any information that allows us to personally identify users.
All described processes, including setting cookies to read information from the device used, are only executed if you have granted us consent according to Art. 6 Sec. 6 DSG. You can withdraw your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with Snapchat (available at Snapchat Data Processing Agreement), which obligates Snapchat to protect the data of our site visitors and not to share it with third parties. Snapchat may transfer collected information outside the European Economic Area, relying on Standard Contractual Clauses adopted by the European Commission to ensure compliance with European data protection standards.
TikTok Pixel
This website uses the "TikTok Pixel," a tracking technology from the social network TikTok, operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok").
Cookies (small text files stored on your device) are used to collect, transmit, and analyze information about browsing behavior on our website in pseudonymized form. This data allows TikTok to deliver interest-based and personalized product recommendations on TikTok. The information collected and pseudonymously processed generally includes device ID, device type, timestamp, operating system, and IP address. TikTok can associate this data with other information they have about the user, such as account details on TikTok. TikTok may also combine the information gathered through the Pixel with data from other websites and interactions on TikTok, creating pseudonymized user profiles. The information collected cannot be used to personally identify visitors to this website.
The TikTok Pixel also enables us to measure the effectiveness of TikTok ads. If a user is redirected from a TikTok ad to our website and the cookies are still valid, the Pixel tracks certain predefined user actions (e.g., completed transactions, leads, searches on the website, product page views). When such an action occurs, your browser sends an HTTP request to TikTok’s server through the TikTok Pixel, transmitting details about the action. This helps TikTok generate statistics on user behavior on our website following a TikTok ad, assisting us in optimizing our offerings.
All the processes described, including setting cookies to read information from the device used, will only be carried out if you have given your consent in accordance with Art. 6 Sec. 6 DSG. You can withdraw your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with TikTok, obligating them to protect the data of our site visitors and not to share it with third parties. TikTok transfers collected information outside the European Economic Area, relying on Standard Contractual Clauses adopted by the European Commission to ensure compliance with European data protection standards.
11) SITE FUNCTIONALITIES
11.1 Use of YouTube videos
This website uses the YouTube embedding feature to display and play videos from YouTube, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
The extended privacy mode is used, which according to the provider, only starts storing user information when the video is played. When you start playing an embedded YouTube video, YouTube sets cookies to collect information about user behavior. According to YouTube, these cookies are used, among other things, to collect video statistics, improve user experience, and prevent abusive behavior. If you are logged into Google, your data will be directly linked to your account when you click on a video. If you do not wish for this data to be associated with your YouTube profile, you must log out before activating the button. You have the right to object to the creation of such user profiles, which you must exercise directly with YouTube.
In the course of using YouTube, personal data may also be transferred to Google LLC's servers in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established with each visit to this website, which may trigger further data processing operations beyond our control.
All the processes described, including reading information from the device used through the tracking pixel, will only be carried out if you have given your consent in accordance with Art. 6 Sec. 6 DSG. Without this consent, the use of YouTube videos will be omitted during your visit to the site.
You can withdraw your consent at any time with future effect. To exercise your withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website or use alternative options communicated to you on the site.
For more information on YouTube's privacy practices, please refer to YouTube's Terms of Service at YouTube Terms and Google's Privacy Policy at Google Privacy.
11.4 Google Translate
This site uses the translation service "Google Translate" provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), via an API integration. To automatically display translations in your selected language, the browser you use will connect to Google's servers. Google uses "cookies," which are text files stored on your computer that allow for the analysis of your website usage. The information generated by the cookie about your use of this website (including the truncated IP address) is generally transmitted to and stored on Google's servers, and may also be transferred to servers of Google LLC in the USA.
For more information on Google Translate and Google's privacy policy, you can view the details at: Google Privacy Policy.
12) RIGHTS OF THE PERSON CONCERNED
12.1 The applicable data protection law grants you the following data subject rights (information and intervention rights) with respect to the processing of your personal data by the data controller, where the specific conditions for exercising these rights are referenced to the cited legal basis:
- Right to information in accordance with Art. 25 ff DSG;
- Right to rectification pursuant to Art. 32 DSG;
- Right to erasure pursuant to Art. 32 GDPR;
- Right to restriction of processing pursuant to Art. 32 GDPR;
12.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF THE PROCESSING RIGHT IS REVOKED, THE ORDERING PROCESS MAY BE INTERRUPTED OR CANCELLED AND THE CLAIM TO TIMELY COMPLIANCE WITH THE CONTRACT CANNOT BE GUARANTEED. THE CUSTOMER BEARS THE RESPONSIBILITY FOR ANY NON-FULFILMENT OR DEFECTIVE FULFILMENT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
13) DURATION OF PERSONAL DATA STORAGE
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose, and, if applicable, additionally by the respective statutory retention periods (e.g., commercial and tax retention periods).
If there are statutory retention periods for data processed on the basis of Art. 6 (3) DSG in the context of contractual or quasi-contractual obligations, these data are routinely deleted after the retention periods expire, unless they are still required for contract fulfillment or contract initiation and/or we have no legitimate interest in further retention.
For the processing of personal data based on Art. 6 (3) DSG, such data are stored as long as the purpose of their use remains, or until the data subject exercises their right to object according to Art. 21 (1) DSG, unless we can demonstrate compelling legitimate reasons for the processing that outweigh the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Unless otherwise stated in the specific processing situations described in this statement, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
