Datenschutzerklärung

Privacy Policy

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obligated to provide the data. A failure to provide the data will have no consequences. This only applies as long as no other information is provided during the subsequent processing operations.

"Personal data" means all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the requested page, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. The processing takes place on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in ensuring the smooth operation of our website and improving our services.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. For Canada, there is an adequacy decision by the European Commission. For the USA, there is an adequacy decision by the European Commission under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place based on contractual obligations comparable to the EU Commission’s standard contractual clauses.

Contact

Responsible Entity

You can contact us upon request. The responsible entity for data processing is: Lucas Siegmann, Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany, +491634224372, info@evaya.de

Initiative Contact by the Customer via Email

If you contact us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of processing and responding to your inquiry.

If the contact serves the purpose of pre-contractual measures (e.g., consultation regarding purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.

If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation. We use your email address only for processing your inquiry. Your data will be deleted afterward, taking into account legal retention periods, unless you have consented to further processing and use.

Collection and Processing when Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you. If the contact serves the purpose of pre-contractual measures (e.g., consultation regarding purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation. We use your email address only for processing your inquiry. Your data will be deleted afterward, taking into account legal retention periods, unless you have consented to further processing and use.

Orders

Collection, Processing, and Transfer of Personal Data during Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and address your inquiries. Providing the data is required to conclude the contract. Failure to provide the data will result in the inability to conclude a contract. The processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you. Your data may be shared with, for example, shipping companies, fulfillment providers, payment service providers, order processing services, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to the minimum necessary.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. For Canada, there is an adequacy decision by the European Commission. For the USA, there is an adequacy decision by the European Commission under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place based on contractual obligations comparable to the EU Commission’s standard contractual clauses.

Inventory Management

Use of an External Inventory Management System

We use an inventory management system as part of the contract fulfillment. Your personal data collected during the order is transmitted to DHL. The processing of your personal data serves the purpose of fulfilling the contract with you and is based on Art. 6(1)(b) GDPR.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the unique identification of the browser when the website is accessed again. Cookies are stored on your computer, so you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide whether to accept them individually, as well as prevent the storage of cookies and the transmission of the contained data. Cookies that are already stored can be deleted at any time. However, please note that in this case, you may not be able to use all the features of this website to their full extent.

Technically Necessary Cookies

Unless otherwise specified in this privacy policy, we only use technically necessary cookies to make our offering more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.

The use of cookies or similar technologies is based on § 25(2) TDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offering. You have the right to object to this processing of your personal data for reasons arising from your particular situation at any time.

Use of the Shopify Consent Tool

We use the consent tool “Shopify Privacy & Compliance” from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada). The tool allows you to give consent for data processing on the website, particularly for the setting of cookies, and to exercise your right to withdraw consent for already granted consents. The data processing serves the purpose of obtaining and documenting necessary consents for data processing to comply with legal obligations. For this purpose, cookies may be used. User information, including your IP address, is collected and transmitted to Shopify. Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. For Canada, there is an adequacy decision by the European Commission. For the USA, there is an adequacy decision by the European Commission under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place based on contractual obligations comparable to the EU Commission’s standard contractual clauses. The data processing occurs to fulfill a legal obligation based on Art. 6(1)(c) GDPR. More information on Shopify’s privacy policy can be found at https://www.shopify.com/de/legal/datenschutz and information about cookies used at https://www.shopify.com/de/legal/cookies.

Analysis

Use of Shopify Analytics

We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of data processing. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada). The data processing serves the purpose of analyzing this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. The following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. While navigating the website, information about visited pages or products, the referring URL, and how you interact with the website is collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files for capturing information on how you navigate the website) are used for this purpose.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. For Canada, there is an adequacy decision by the European Commission. For the USA, there is an adequacy decision by the European Commission under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place based on contractual obligations comparable to the EU Commission’s standard contractual clauses. The use of cookies or similar technologies is based on your consent under § 25(1) TDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data occurs based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before its withdrawal.

More information about privacy at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information about the data processing agreement at https://www.shopify.com/de/legal/dpa, and information about cookies at https://www.shopify.com/de/legal/cookies.

Plugins and Miscellaneous

Use of YouTube

We use the YouTube video embedding function from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The function displays YouTube videos embedded in an iframe on the website. The “extended privacy mode” option is enabled. As a result, YouTube does not store information about the visitors of the website. Information is only transmitted to YouTube when you watch a video. Your data may be transferred to the USA. For the USA, there is an adequacy decision by the European Commission under the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and is committed to complying with European privacy principles. The use of cookies or similar technologies is based on your consent under § 25(1) TDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data occurs based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before its withdrawal. More information about YouTube and Google’s data collection and how you can protect your privacy can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy.

Rights of the Data Subject and Retention Period

Retention Period

After full contract fulfillment, data is initially stored for the duration of the warranty period, then considering legal retention periods, especially tax and commercial law requirements, and will be deleted after the expiry of the retention period, unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. In addition, under Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR and to object to processing for direct marketing purposes.

Right to Lodge a Complaint with the Supervisory Authority

According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe the processing of your personal data is not lawful. You may file a complaint with the supervisory authority responsible for us, which can be reached at:

Thuringian State Commissioner for Data Protection and Freedom of Information Postfach 90 04 55 99107 Erfurt

or

Häßlerstrasse 8 99096 Erfurt Tel.: +49 361 573112900 Fax: +49 361 573112904 E-Mail: poststelle@datenschutz.thueringen.de

Right to Object

If the personal data processing listed here is based on our legitimate interest according to Art. 6(1)(f) GDPR, you have the right to object at any time to this processing for reasons arising from your particular situation. After an objection, the processing of the affected data will cease unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.