1. Information on data protection

We are pleased that you are visiting our website and thank you for your interest in our company and our products. We would like to take this opportunity to inform you about what data we collect, use, process and how we handle your personal data and when.

2. Data collection and data use

Personal data is information that can be used to identify a person. This includes, for example, your name, address, email address, or telephone number.

(1) Collection of personal data when using the website

When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access Status/HTTP Status Code
• amount of data transferred
• Website from which the request comes
• Browser
• Operating system and its interface
• Browser software language and version.
• The legal basis for the storage of the data is Art. 6 (1) (f) GDPR.
  

(2) Collection of personal data during registration

We offer you the opportunity to register on our website by providing personal data.
Depending on the type of contract concluded, we store the following data:

• Surnames, first names
• address
• Billing address
• Email address
• phone number
  

The data is entered into an input form, transmitted to us, and stored. The data will not be shared with third parties. Users can access their user account to order goods via the app.
As part of the registration process, the user's consent to the processing of this data was obtained, Article 6 Paragraph 1 a) GDPR. Registration is also necessary for the performance of a contract for the purchase of goods in our online shop or for taking steps prior to entering into a contract, Article 6 Paragraph 1 b) GDPR. The data collected is used to process the purchase of goods in our online shop, in particular to ensure the correct shipment of ordered goods.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case if the registration on our website is cancelled or modified, or if the data is no longer required for the performance of the contract. Even after a contract has been concluded, it may be necessary to store the contracting party's personal data in order to comply with contractual or legal obligations (e.g., for tax reasons).
Users can cancel their registration at any time. You can also have your stored data modified at any time, as follows:
Insofar as the data is required for the performance of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as no contractual or legal obligations preclude such deletion.

In the case of your consent, the legal basis for the processing of the data is Art. 6 (1) (a) GDPR and, if the registration serves the performance of a contract or the implementation of pre-contractual measures with you, additionally Art. 6 (1) (b) GDPR.

3. Purposes of the processing of personal data 

We only store your data for the following purposes:
For processing orders (including payment processing and, if necessary, credit checks), for sending advertising by us, and for customer service.

We store and process your personal data at our central company headquarters.

Your personal data will only be transferred to third parties if the transfer is necessary for the execution of the contract or for billing or collection purposes (e.g. shipping companies or payment service providers) or if you have expressly consented.

The legal basis for the transfer of data to third parties for the purpose of contract processing or for billing purposes is Art. 6 para. 1 lit. b GDPR and for the transfer in the context of legally mandated cases Art. 6 para. 1 lit. c GDPR.

4. Duration of data storage 

We will store your data for as long as the respective purpose requires, taking into account your legitimate interests.  If there is a retention period under tax law for certain data processed for the processing of purchase contracts, the data will be stored for 6 or 10 years. During this period, the processing of the data will be limited after 2 years, i.e. the data will only be used to comply with legal obligations. The retention obligation begins at the end of the calendar year in which the order was placed by the customer or the contract was fulfilled.

5. Disclosure of personal data to third parties

We may share your personal data with the following companies/categories of persons in accordance with the law:

Tax audit offices, other authorities
External service providers and professional consultants such as lawyers, auditors, accountants, credit agencies for credit checks, debt collection agencies,

Postal/shipping service providers, forwarders eg UPS, DHL, Deutsche Post, DPD
Payment providers such as PayPal (Europe) S.à rl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg; Klarna AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, (Amazon Pay) Amazon Payments Europe sca, 5 Rue Plaetis, L-2338 Luxembourg; (Apple Pay) Apple Distribution International, Hollyhill Industrial Estate, Hollyhill Cork, Ireland; Shopify Payments, 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5; Google Pay (Europe), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

E-commerce platform Shopify
We use Shopify, a service provided by Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5, to operate our online shop. This service provides an e-commerce platform through which we offer our goods for sale. The data you submit as part of your order is stored on a Shopify server.

Shopify has explicitly designed its infrastructure in such a way that cross-border data transfer is GDPR-compliant. In this process, personal data of individuals from Europe is first received and processed in Ireland as Shopify's EU headquarters and then transferred to Canada to the parent company. Insofar as data is transferred from there to processors based in other countries, e.g. USA, this is done in accordance with the export requirements of the Canadian Data Protection Act, which is recognised by the European Commission.

In addition, personal data may be transferred within a group of companies (e.g. between Shopify Inc. (Canada) and Shopify in the USA) if these companies have an internal policy for the protection of data (so-called "Binding Corporate Rules, BCR"), which are approved by a European data protection authority (in this case based in Ireland) (Article 47 GDPR).

Finally, data transferred from Shopify Canada to the US is encrypted in transit and at rest. As a result, they cannot be easily decrypted.  

For more information, please visit http://www.shopify.com/legal/privacy.

The legal basis for the transfer of data to third parties for the purpose of contract processing or for billing purposes is Art. 6 (1) (b) GDPR and Art. 6 (1) (c) GDPR for disclosure in cases ordered by law.

6. Your rights 

To exercise your rights, you can use the contact form (https://everjump.fit/pages/kontakt) use or contact the data protection officer or the controller or contact us by email: support@everjump.fit

You have the following rights:

6.1 Revocation of consent
You can withdraw your consent to the processing of personal data at any time with effect for the future.
The contact options above are available for this purpose (https://everjump.fit/pages/kontakt).

6.2 Further rights
Furthermore, you have the following rights vis-à-vis us with regard to your personal data:

• Right to information,
• Right to rectification,
• Right to erasure or restriction of processing,
• Right to object to processing,
• Right to data portability,

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
The responsible data protection supervisory authority for Berlin is:

Berlin Data Protection Authority
Friedrichstr. 219, 10969 Berlin,

E-mail: mailbox@datenschutz-berlin.de

 Phone number: 030 13889 -0

7. Contact form

If you send us inquiries via the contact form, we will use your data exclusively to process your request. This data will not be used for advertising purposes or passed on to third parties.

The legal basis for the processing of data transmitted via the contact form or in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the contact is also aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

The data you enter in the contact form will be stored by us until you ask us to delete it, revoke your consent to its storage or the purpose for which it was stored has ceased to apply.

8. Cookies 

To make your visit to our website more attractive and to enable the use of certain functions, we use cookies. These are small text files that your web browser receives when you visit our pages and stores on your computer. Some cookies are deleted immediately after you close your browser. Other cookies remain permanently on your computer and allow us to recognize you or your computer on your next visit to our website.
This site uses the following types of cookies, the scope and function of which are explained below:

a) Transient cookies, which are automatically deleted when you close your browser. These include session cookies. These store a so-called session ID, which allows the various requests from your browser to be associated with the same session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

b) Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
You can influence the use of cookies by changing your browser settings. Most browsers have an option to restrict or prevent the storage of cookies. Each browser manages cookie settings differently; this is described in your browser's help menu.

These can be found for the respective browsers under the following links:

• Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
• Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
• Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Please note, however, that disabling cookies may limit your access to certain website features.
The legal basis for the use of cookies is Art. 6 para. 1 lit. f GDPR.
When using cookies, a distinction must be made between strictly necessary cookies and those used for other purposes (measuring website traffic, advertising). Our consent manager allows you to accept or reject all or some of the non-essential cookies. If you choose to reject them, you may not be able to fully utilize our website. You can manage and withdraw this consent via our consent management system (also known as the "cookie banner" or "cookie settings").

9. Analysetools

9.1 Use of Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in abbreviated form, which means that they cannot be linked to individuals. If the data collected about you has a personal reference, this will be excluded immediately and the personal data will be deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

9.2 Using Hotjar
Our website uses Hotjar, an analytics software from Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta (http://www.hotjar.comHotjar uses cookies and a tracking code, which transmit the collected data to the Hotjar server. This data primarily consists of device-related information such as your IP address, screen size, device type, browser information (including type and version), geographic location, and language settings. Your email address, along with your first and last name, is also transmitted if you have provided this information. User interaction, such as mouse movements, visited websites, and the date and time of use, is also regularly transmitted to Hotjar. Your IP address is automatically anonymized by Hotjar and stored exclusively in this form. In addition, users of the website are assigned a unique user identifier (UUID), through which Hotjar can record returning users of our website - without linking to your personal data.

Via the link https://www.hotjar.com/opt-out You can prevent Hotjar from collecting and using your data.

9.3 Use of Tidio
Our website uses Tidiochat, a service provided by Tidio Ltd., 220C Blythe Road, W14 0HH, London, United Kingdom (www.tidiochat.comThis service processes anonymized data for web analytics and to operate a live chat. Cookies may be used for this purpose, enabling the recognition of your browser. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. They allow the entity that sets the cookie to receive certain information. Data collected through the Tidiochat service will not be used to identify you personally without your consent. Furthermore, the data will not be combined with personal data about the holder of the pseudonym used. You can configure your browser settings according to your preferences, e.g., You can refuse the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

You can find more information about this in Tidio's privacy policy:https://www.tidiochat.com/en/privacy-policy.

Right to object

You can object to the collection and storage of data for the purpose of usage analysis at any time with effect for the future by notifying us of your objection: e.g. by email: support@everjump.fit

The legal basis for the use of analytics tools is Article 6(1). SArticle 6(1)(f) GDPR.

10. Social Media Links 

On our website, we link to the social media platforms Facebook, Instagram, and YouTube by using the respective symbols. These are hyperlinks that do not transmit your data. If you click on the link, you will be redirected directly to our respective social media presence. Your data will only be transmitted to the respective social media service if you are logged in to your respective user account. In this case, the respective social media platform may obtain information about what content you have viewed on our website.

The following are solely responsible for the social media services we have linked to:

Facebook Inc., 1601, is responsible for Facebook and its website. S. California Ave, Palo Alto, CA 94304, USA;

For Instagram and its website, the responsible party is Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;

For YouTube and its website, the data controller is YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA;

For further information about the purpose and scope of data collection and the further processing and use of your data by the respective social media service, please refer to the privacy policy of the respective platform.

11. Facebook-Connect 

On our website, we use the "Facebook Connect" service provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). We offer you the option of logging in to our website with Facebook Connect if you have a Facebook profile and give us explicit consent to share data with Facebook. Additional registration is not required in this case. To register, you will be redirected to the Facebook page, where you can log in with your usage data. By doing so, your browser establishes a direct connection to Facebook's servers, linking your Facebook profile and our service. Through this link, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. Depending on your data protection settings on Facebook, we automatically receive the following information from Facebook Inc. (name, e-mail address, date of birth, address, Facebook name, user ID, age, gender, and, if applicable, profile picture, friend list and likes). We will only use your name, email address, date of birth and address to create a user account, if you have shared it with Facebook. This information is necessary for the conclusion of the contract in order to be able to identify them.

For further information on Facebook Connect and privacy settings, please refer to the privacy policy and terms of service of Facebook Inc.http://www.facebook.com/policy.php

If you do not want Facebook to link the data obtained through our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also block the Facebook Connect plugin using browser add-ons.

Cancellation
The consent given for the exchange of data via Facebook Connect can be revoked at any time for the future by sending a message to Tel: 0621 63742779 or E-Mail: support@everjump.fit be revoked.

12. Google Tag Manager

On our site, we use the Google Tag Manager service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94.043 USA. Google Tag Manager allows marketers to manage website tags from one interface. A tag is a marking or marking of a data set. However, the Tag Manager itself, which uses the tags, works without cookies and does not collect any personal data. The tags set up via Google Tag Manager only collect data that is passed on to the target system. Because the data is only passed on, the system does not collect or store the determined data itself. The Tag Manager thus only ensures the triggering of other tags, which in turn may collect data. Corresponding statements on these respective third-party providers can be found in this privacy policy. However, Google Tag Manager does not use this data.If you have set or otherwise deactivated cookies, this will be taken into account for all tracking tags used with Google Tag Manager, so the tool will not change your cookie settings.

Google may ask you for permission to share some product data (e.g. Your account information) with other Google products to enable certain features, such as making it easier to add new conversion tracking tags for AdWords. Also, Google's developers review product usage information from time to time to further optimize the product. However, Google will not share this type of data with other Google products without your consent.

For more information, see the Google Acceptable Use Policy and Google Privacy Notice for this product.

13. Newsletter

(1) With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) We use the so-called double opt-in procedure for newsletter registration. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 Stunden] Once you confirm, your information will be blocked and automatically deleted after one month. We also store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any potential misuse of your personal data.

(3) The only mandatory information required to receive the newsletter is your email address. Providing further, separately marked data is voluntary and is used to personalize our communication with you. After your confirmation, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6(1)(f) GDPR. SArticle 1(a) GDPR.

(4) You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can do this by clicking on the link provided in every newsletter email, or by sending an email to (suppoert@everjump.fit) or by sending a message to the contact details provided in the legal notice.

To send our newsletters, we use the Klaviyo service of the company Klaviyo Inc., 225 Franklin St, Floor 10, Boston, MA 02110, USA. The processing of your data stored when registering for the newsletter (e-mail address, name, IP address, date and time of your registration, if applicable) may also take place in the USA. In the opinion of the European Court of Justice, an adequate level of data protection cannot currently be assumed in the USA.

Klaviyo uses so-called standard contractual clauses pursuant to Art. 46 para. 2 and 3 GDPR as the basis for processing or transferring data to countries outside the EU (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=deThese clauses commit Klaviyo to complying with EU data protection standards when processing your data, even if the data is transferred to, processed, and stored in third countries such as the USA. You can find more information on Klaviyo's website at [link to Klaviyo website].https://www.klaviyo.com/legal/data-processing-agreementandhttps://www.klaviyo.com/legal/privacy/privacy-notice

(5) Please note that we analyze your user behavior when sending our newsletter. For this analysis, the emails we send contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the analysis, we link the data mentioned in Section 3 and the web beacons to your email address and a unique ID. Using the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on, and infer your personal interests from this data.
Right to object

You can object to this tracking at any time by clicking the separate link provided in each email or by contacting us via another method, e.g. by phone: 0621 63742779 or email: support@everjump.fit We will inform you that your information will be stored for as long as you are subscribed to the newsletter. After you unsubscribe, we store the data purely for statistical and anonymous purposes. This tracking is also not possible if you have disabled the display of images by default in your email program. In this case, the newsletter will not be displayed in its entirety, and you may not be able to use all of its features. If you manually enable the display of images, the aforementioned tracking will occur.

14. Use of social media plug-ins

On our website, we use so-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially transmitted to Instagram. The plugin, in the form of images, is labeled "Follow us on Instagram." We offer you the option to communicate directly with Instagram via the button. Only when you click on the marked field and thereby activate it will Instagram receive the information that you have visited our website. In addition, the data specified in Section 1 of this declaration will be transmitted. By activating the plugin, your personal data will therefore be transmitted to Instagram and stored there (in the USA for US-based providers).
We have no influence on the data collected and data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, or the storage periods. We also have no information on the deletion of the collected data by Instagram.

When you interact with the plug-in, in particular click on the image plugin, your browser establishes a direct connection to Instagram's servers. The content of the plug-in is transmitted directly to your browser by Instagram and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. The information will also be published on your Instagram account and displayed there to your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your Instagram profile.

Instagram stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of displaying needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Instagram to exercise this.

For further information on the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your related rights and settings options to protect your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/.
If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely block the loading of Instagram plugins with browser add-ons, e.g., with the script blocker "NoScript" (http://noscript.net/).
The legal basis for the use of the plug-ins is Article 6(1). SArticle 6(1)(f) GDPR.

15. Remarketing/ Retargeting

(1) On our websites, we use “Custom Audiences” from Facebook Inc., 1601 for the purposes of retargeting and remarketing. S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This service uses so-called tracking or remarketing pixels. These are pixel image files that enable log file analysis. By using the pixels, the service provider can see when and how many users have accessed the pixel, or whether and when an email was opened or a website was visited.

(2) With the help of this service, users of the website can be shown interest-based advertisements ("Facebook ads") when visiting the social network Facebook or other websites that also use the process. We use this to pursue the interest of showing you advertising that is of interest to you in order to make our website more interesting for you. When you visit our website, a direct connection to Facebook's servers is established via the pixel. This enables Facebook to identify you by your browser ID, as these can be linked to your user account. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have called up the corresponding website of our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.

(3) The deactivation of the "Facebook Custom Audiences" function is not possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_möglich.

(4) The legal basis for processing your data is Article 6(1). SArticle 6(1)(f) GDPR. Further information on data processing by Facebook can be found at [link to Facebook's privacy policy]. https://www.facebook.com/about/privacy/.
Right to object
If you do not wish to see advertising generated by the respective targeting service, you can object to the use of retargeting technology on our websites by sending us a message tosupport@everjump.fitsend.

 

Tracking tools:
The app uses various tracking and analysis tools. Data processing is based on your consent in accordance with Article 6 Paragraph 1. SThe transfer to a third country is based on Article 49(1)(a) GDPR. You can prevent the use of this tool via our consent tool and withdraw your consent at any time.

Google Analytics for Firebase and Google Play Store Analytics
The app uses Google Analytics for Firebase and Google Play Store Analytics technologies from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Firebase"). For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.
Google Analytics uses so-called "cookies," text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookies about your use of this website is generally transmitted to and stored on a Google server in the USA. If IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and processed there.shortened.
In the USA, an adequate level of data protection cannot generally be assumed. There is a risk that authorities may access your data for security and surveillance purposes without your knowledge or ability to seek legal recourse.
Further information on the Google Analytics privacy policy can be found at https://support.google.com/analytics/answer/6004245?sjid=3364535034656199429-EU.

Apple App Store Analytics

The app uses Apple App Store Analytics technology from Apple Inc., One Apple Park Way, Cupertino, 95014 California, USA.

Apple may provide statistics about your use of the App to its partners and third-party developers. This serves Apple to further develop its apps, products and services. The analysis data and statistics are aggregated or transmitted in a form that does not allow any conclusions to be drawn about your person.

You have the option not to send app usage data to third-party app developers. To do this, open Settings, select Privacy & Security, tap Analytics & Improvements, and then turn off Share with App Developers. If "Share iPhone & Watch Analytics" is turned off, sharing data about crashes and other statistics about your use of apps with third-party app developers is automatically disabled.

For more information about Apple's privacy policy, please visit:www.apple.com/de/privacy.

18. Orders placed through our website or the app

In order to be able to place orders via our websites or via our app, the user must enter certain personal data, namely the following data: name, address, payment data (credit card data, if applicable). This data is stored by us in order to be used exclusively for the purpose of order processing. In addition, the following data is automatically stored: IP address, date and time of registration.

Data will only be passed on to third parties if and to the extent that this is necessary for the proper processing of an order and the purchase contract that has been concluded. For shipping processing, order-relevant data (contact and delivery data) may be transmitted to our shipping partner:

Shipment:
acut fulfillment GmbH

Motzener Size 36-38

12277 Berlin

Telephone: +49 (0)30 617 89 40

Registry Court:Berlin District Court

PayPal
Our online shop allows payment via PayPal. The payment service provider is PayPal (Europe). S.à.rl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg.

If you pay with PayPal, the payment data you enter will be transmitted to PayPal.

The transfer of your data to PayPal takes place on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). You can revoke your consent at any time. Data processing operations carried out in the past remain effective in the event of a revocation.

Klarna
To enable you to pay via Klarna, your personal data (contact and delivery details) may be transmitted to Klarna. This is necessary so that Klarna can verify your eligibility to use this payment method. Personal data transmitted to Klarna will be processed in accordance with the [relevant data protection policy/guidelines].Privacy Policyprocessed by Klarna.

19. WhatsApp

To send newsletters, we use the instant messaging service WhatsApp Business of WhatsApp LLC, 1601 Willow Road Menlo Park, California 94025, USA via the service provider Charles GmbH, Gartenstr. 86-87, 10115 Berlin. 

Registration for the WhatsApp newsletter uses a double opt-in process. After registering via a CTA or QR code, you will receive a message asking you to confirm that you wish to receive messages from us via WhatsApp. If you no longer wish to receive messages, you can withdraw your consent and unsubscribe from the newsletter at any time.via a keyword defined by usunsubscribe.

Mandatory information for sending the newsletter isYour phone number aloneAfter your confirmation, your telephone number will be forwarded to our service provider, Charles GmbH, for the purpose of sending you the newsletter, where it will be processed and stored. The legal basis for this is Article 6(1)(f) GDPR. SArticle 6(1)(a) GDPR.

If you communicate with us via WhatsApp, certain data that you share with the App will be stored and processed by WhatsApp. In particular, this includes information provided by the user, such as messages, photos, videos, billing data and stored profile pictures. WhatsApp states that it only stores this data end-to-end encrypted. Some metadata is collected by WhatsApp unencrypted. This includes telephone number, location, IP address, information about your device, type and frequency of app use, location and information about the time and recipient of the messages you send. According to WhatsApp's privacy policy, this information is sometimes shared with other Meta companies, which include Facebook and Instagram, which are based in the United States. In some cases, such data is also shared with external companies, service providers or partners.

Data processing can also take place in the USA. In the opinion of the European Court of Justice, an adequate level of data protection cannot currently be assumed in the USA.

WhatsApp uses so-called standard contractual clauses pursuant to Art. 46 para. 2 and 3 GDPR as the basis for processing or transferring data to countries outside the EU (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=deThese clauses commit WhatsApp to complying with EU data protection standards when processing your data, even if the data is transferred to, processed, and stored in third countries such as the USA. You can find more information in WhatsApp's privacy policy at [link to WhatsApp privacy policy].https://www.whatsapp.com/legal/privacy-policy-eea/?locale=de_DE“

20. Emails

For sending e-mails, we use the service provider Klaviyo Inc., 225 Franklin St, Floor 10, Boston, MA 02110, USA. This applies to transactional e-mails such as e.g. Order confirmation, shipping confirmation, promotional emails and newsletters.

Klaviyo has access to your data. Data processing can also take place in the USA. In the opinion of the European Court of Justice, an adequate level of data protection cannot currently be assumed in the USA.

Klaviyo uses so-called standard contractual clauses pursuant to Art. 46 para. 2 and 3 GDPR as the basis for processing or transferring data to countries outside the EU (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=deThese clauses commit Klaviyo to complying with EU data protection standards when processing your data, even if the data is transferred to, processed, and stored in third countries such as the USA. You can find more information on Klaviyo's website at [link to Klaviyo website].https://www.klaviyo.com/legal/data-processing-agreementandhttps://www.klaviyo.com/legal/privacy/privacy-notice.

21. Loyalty Program

To administer our loyalty program, we use the loyalty tool provided by LoyaltyLion Ltd., HubHub – LoyaltyLion, 20 Farringdon Street, London, EC4A 4EN, United Kingdom. The data you submit as part of your participation in the program will be processed and stored by LoyaltyLion. This includes, in particular, yourName, address, email address, telephone number (if applicable), date of birth (if applicable), and all purchase-related data..

The legal basis for the processing of the mandatory personal data is Art. 6 (1) (b) GDPR. For the initiation and execution of the contract to be concluded with you for participation in the loyalty program, the processing of this personal data is necessary in order to be able to assign your loyalty points and your points account. The processing of voluntarily provided personal data is carried out on the basis of our legitimate interest, Art. 6 para. 1 lit. f GDPR. The data is used to improve our offer and to advertise in line with interests. You can object to this processing of your data at any time or alternatively simply remove this data from your account.

22. Data Security

We have implemented a variety of security measures to protect your personal information. Our servers and databases are protected by physical and technical measures, among other things.

When collecting and transmitting data via our website, we use standardized SSL encryption technology. Personal data is transmitted during the ordering process via SSL encryption, recognizable by the lock symbol in the browser and in the address bar by the addition "https://".

With encrypted communication, your payment data that you transmit to us cannot be read by third parties. When communicating by e-mail, 100% data security cannot be guaranteed.

23. Changes to this Privacy Policy

We may change this Privacy Policy at any time. Any changes to this Privacy Policy will be posted on this website and will be effective automatically 30 days after they are posted. We will notify you of any material changes to this Privacy Policy by email.