Privacy policy
1. Information on the collection of personal data and contact details of the controller
1.1 We are pleased about your visit to our website and your interest in our online shop. In the following, we inform you about the handling of your personal data when you use our website. Personal data is any data by which you can be personally identified.
1.2 The controller for the data processing on this website within the meaning of the General Data Protection Regulation (Datenschutz-Grundverordnung, DSGVO) is:
itsFPV UG (haftungsbeschränkt)
Hubertusstraße 13
44789 Bochum
Germany
Email: info@itsfpv.net
1.3 For security reasons and to protect the transmission of personal data as well as other confidential content, this website uses SSL or TLS encryption.
2. Data collection when visiting our website
If you use our website for purely informational purposes, i.e. if you do not register, do not place an order and do not otherwise transmit any information to us, we only collect such data as your browser transmits to the server of our website (so-called server log files).
When you visit our website, we collect in particular the following technically required data:
- the website visited
- date and time of access
- amount of data sent in bytes
- source/referrer from which you reached the page
- browser used
- operating system used
- IP address used
This processing takes place pursuant to Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the stable, secure and functional provision of our website.
3. Hosting and shop system
For the hosting, display and operation of our online shop we use Shopify, a service provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
In connection with the use of Shopify, personal data may also be transferred to other companies within the Shopify group of companies as well as to integrated service providers, in particular to Shopify Inc., Canada, and to further recipients in third countries.
Insofar as data is transferred to Canada, this takes place on the basis of the adequacy decision of the European Commission. Insofar as data is transferred to other third countries, this takes place on the basis of suitable safeguards, in particular standard contractual clauses.
Further information on data protection at Shopify can be found at: https://www.shopify.com/legal/privacy
4. Cookies and consent management
Our website uses cookies and comparable technologies. Some of these are technically necessary technologies which are required for the operation of the shop, the shopping cart function, the order processing or security-relevant functions.
In addition, we use optional technologies for statistics, analytics, external media and marketing, depending on your selection in the consent banner.
The collection and management of your consents takes place via the data protection and consent functions of Shopify, or via a consent solution integrated into the shop. In this context, your consent decisions may be stored and processed technically in order to take your selection into account during later visits to the site.
The legal basis for the use of technically necessary technologies is Art. 6 (1) lit. f DSGVO. The legal basis for the use of technologies requiring consent is Art. 6 (1) lit. a DSGVO.
5. Contacting us
If you contact us by email or via a contact form, we process the personal data communicated by you exclusively for the purpose of processing your enquiry and the associated technical administration.
The legal basis for the processing is Art. 6 (1) lit. f DSGVO. Insofar as your enquiry is directed towards the conclusion or performance of a contract, the additional legal basis is Art. 6 (1) lit. b DSGVO.
Your data will be deleted as soon as your enquiry has been conclusively processed and no statutory retention obligations preclude such deletion.
6. Customer account
You have the option of opening a customer account on our website. In this context we process the data you provide during registration for the purpose of setting up and administering your customer account as well as for processing future orders.
The legal basis for this processing is Art. 6 (1) lit. b DSGVO.
The customer accounts are administered via Shopify. Depending on the technical setup, this may also include passwordless authentication or authentication via Shopify-managed login services.
7. Data processing for the performance of the contract
When you place an order in our online shop, we process your personal data for the purpose of performing and processing your order, in particular for processing the purchase, for the delivery of the goods or the provision of digital products, for payment processing, for communication in connection with your order and, where necessary, for processing returns, complaints or statutory warranty (Gewährleistung) cases.
The legal basis is Art. 6 (1) lit. b DSGVO.
8. Payment services
8.1 Shopify Payments / credit card payments
If you choose to pay by credit card or other payment methods processed via Shopify Payments, payment processing takes place via Shopify Payments. The technical payment service provider for Shopify Payments in Europe is generally Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin 2, Ireland.
As part of payment processing, the data required for the transaction is transmitted to the respective payment service provider.
The legal basis is Art. 6 (1) lit. b DSGVO.
8.2 PayPal
If you select a PayPal payment method, payment processing takes place via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
The personal data transmitted to PayPal regularly includes master data, payment data and transaction-related information.
The legal basis is Art. 6 (1) lit. b DSGVO.
8.3 Klarna
If you select a Klarna payment method, payment processing takes place via Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
For the purpose of carrying out the payment and, where necessary, identity verification and credit checks (Bonitätsprüfung), we transmit the personal data required for this purpose to Klarna.
The processing of your data for the purpose of payment processing takes place on the basis of Art. 6 (1) lit. b DSGVO. Insofar as Klarna carries out a credit check, the processing takes place in that respect on the basis of Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in avoiding payment defaults and fraud.
Further information on data protection at Klarna can be found at: https://www.klarna.com/de/datenschutz/
8.4 Shop Pay, Apple Pay and Google Pay
In addition, we may offer accelerated payment methods and wallet services such as Shop Pay, Apple Pay and Google Pay. When these are used, the data required for payment processing is transmitted to the respective provider.
The legal basis for this is Art. 6 (1) lit. b DSGVO.
9. Shipping and delivery
For the delivery of ordered goods, we forward your personal data required for this purpose to the commissioned shipping company. This concerns in particular your name and delivery address as well as, where necessary, further contact details required for delivery.
Shipping is carried out in particular via DHL and companies of the Deutsche Post DHL Group.
The legal basis for the transfer is Art. 6 (1) lit. b DSGVO.
10. Newsletter and transactional communication
10.1 Shopify Email
If you subscribe to our newsletter, we use your email address to send you regular information about our products, offers and news.
For sending our newsletter, we use Shopify Email, a service provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
The processing takes place on the basis of your express consent pursuant to Art. 6 (1) lit. a DSGVO. You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter.
10.2 Order-related emails
As part of order processing, we send emails that are required for the performance of the contract, such as order confirmations, shipping information or technical notices regarding the provision of digital products.
The legal basis for this is Art. 6 (1) lit. b DSGVO.
11. Product reviews via Loox
We use the service Loox of Loox Online Ltd. to display and manage product reviews and, where applicable, to send review requests after a purchase.
In this context, in particular order information, name, email address and content voluntarily provided by you such as review texts, photos or videos may be processed.
The legal basis for the display of review functions on the website is our legitimate interest in a transparent presentation of customer experiences pursuant to Art. 6 (1) lit. f DSGVO. Insofar as photo, video or other user-generated content is voluntarily provided, the processing additionally takes place, where applicable, on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO.
12. Upselling and conversion tools
12.1 CartBite
We use CartBite for the display of sales-promoting functions, in particular for notices in the shopping cart, shipping benefits, promotional notices and other conversion elements.
In this context, usage data, interaction data and transaction-related information may be processed.
Insofar as the use is not technically necessary, the processing takes place on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO. Otherwise, the processing takes place on the basis of our legitimate interest in an economical and user-friendly design of our offering pursuant to Art. 6 (1) lit. f DSGVO.
12.2 Candy Rack
We use Candy Rack to display upsell and cross-sell offers during the shopping and ordering process.
In this context, in particular information on the shopping cart, selected products and user interactions may be processed.
The legal basis is, insofar as technologies requiring consent are used, Art. 6 (1) lit. a DSGVO, and otherwise Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in an optimised presentation of our offering.
13. Web analytics via Google Tag Manager and Google Analytics
On our website, we use Google Tag Manager and Google Analytics, services provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland.
Google Tag Manager serves the technical management and delivery of tags and scripts. By means of Google Analytics, we analyse usage behaviour on our website in order to evaluate reach, usage and the effectiveness of our offering statistically.
Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. In this context, in particular information on your usage behaviour, your end device, your browser, your approximate geographical region and your IP address may be processed. According to Google, the IP address is generally truncated within the EU or the EEA prior to any further processing.
Integration takes place via Google Tag Manager within the theme or via theme-related app and code integrations. Insofar as Google Analytics or further statistics or marketing tags delivered via Google Tag Manager are not technically necessary, these are only activated on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO.
Insofar as personal data is transferred to the United States in this context, this takes place on the basis of suitable safeguards.
Further information can be found at: https://policies.google.com/privacy?hl=de
14. Embedded YouTube videos
Videos from the YouTube platform may be embedded on our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland.
When you access a page containing an embedded YouTube video, a connection to YouTube or Google servers may be established. In this context, personal data, in particular IP address, device information and usage data, may be transmitted to YouTube.
Insofar as the integration does not take place exclusively in the extended data protection mode, or insofar as prior consent is technically required, the processing only takes place on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO.
Further information can be found at: https://policies.google.com/privacy?hl=de
15. Retention period (Speicherdauer) of personal data
The duration of the storage of personal data is determined by the respective purpose of the processing, the applicable legal basis and any existing statutory retention periods.
Data that we process on the basis of consent will be stored until your consent is withdrawn, unless there are other legal grounds for further storage.
Data that we process for the performance of the contract will be stored for the duration of the contractual relationship and in accordance with statutory retention periods, in particular under commercial and tax law.
Documents relevant under commercial and tax law are generally retained for six to ten years.
Data processed on the basis of legitimate interests will be stored for as long as your overriding interest does not preclude the continued storage or processing.
16. Rights of the data subject
Under the DSGVO, you have, in particular, the following rights:
- Right of access pursuant to Art. 15 DSGVO
- Right to rectification pursuant to Art. 16 DSGVO
- Right to erasure pursuant to Art. 17 DSGVO
- Right to restriction of processing pursuant to Art. 18 DSGVO
- Right to data portability pursuant to Art. 20 DSGVO
- Right to withdraw consents that have been given pursuant to Art. 7 (3) DSGVO
- Right to lodge a complaint with a supervisory authority (Aufsichtsbehörde) pursuant to Art. 77 DSGVO
17. Right to object
Insofar as we process personal data on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO, you have the right, on grounds relating to your particular situation, to object at any time to such processing with effect for the future.
If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising.