Privacy Statement

Data protection

Information on data protection

We are pleased that you are visiting our website and thank you for your interest in our company and our products. At this point we would like to inform you about which data we collect, use and process, when and how we handle your personal data.

Data collection and data use

Personal data is information that can be used to identify a person as such. This includes, for example, your name, your address, your email address or your telephone number.

(1) Collection of personal data when using the website
When you use the website purely for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
amount of data transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.
The legal basis for storing the data is Article 6 Paragraph 1 Letter f GDPR.

(2) Collection of personal data upon registration
We offer you the opportunity to register on our website by providing personal data.
Depending on the type of contract concluded, we store the following data:

Names, first names
Address
Billing address
E-mail address
Telephone number

As part of the registration process, you will be asked whether you have read the data protection declaration and agree to its validity, which you confirm by clicking on the field and ticking the appropriate box. By doing so, you consent to your personal data being used for the following purposes:

Processing orders
Sending direct advertising, e.g. by email, package insert or post, sending offers and vouchers
Sending review requests
Sending our newsletter

If you give your consent, the legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, if the registration serves to fulfill a contract or carry out pre-contractual measures with you, additionally Art. b GDPR.

The name and contact details of the person responsible for managing personal data is:
Nhat Ha Thi Nguyen
Rosenbergstr. 107
70193 Stuttgart
Germany

Telephone: 015679321104
Email: hi(at)craftycare.de

Contact details of the data protection officer

You can reach our data protection officer at:
Email: hi(at)craftycare.de

Purposes of processing personal data
We only store your data for the following purposes:
To process orders (including payment processing and, if necessary, credit checks), to send us advertising and for customer service.

We store and process your personal data at our central company headquarters.

Your personal data will only be transferred to third parties if the transfer is necessary as part of contract processing or for billing or debt collection purposes (e.g. shipping companies or payment service providers) or if you have expressly consented.

The legal basis for the transmission of data to third parties for the purpose of contract processing or for billing purposes is Article 6 Paragraph 1 Letter b GDPR and for the transfer in the context of legally mandated cases Article 6 Paragraph 1 Letter c GDPR.

Duration of data storage

We store your data for as long as the respective purpose requires, taking into account your legitimate interests. If there is a tax retention period for certain data that is processed for the processing of sales contracts, the data will be stored for 6 or 10 years. During this period, the processing of data is restricted after 2 years, meaning the data will only be used to comply with legal obligations. The retention obligation begins at the end of the calendar year in which the order was placed by the customer or the contract was fulfilled.

Transfer of personal data to third parties
We may share your personal data with the following companies/categories of people in accordance with legal requirements:

Tax auditing and other authorities
External service providers and professional consultants such as lawyers, auditors, accountants, etc. Credit agencies for credit checks, debt collection service providers
Postal/shipping service providers, freight forwarders such as UPS, DHL, Deutsche Post, payment providers such as PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg; Klarna AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden; Shopify Payments, 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5; Google Pay (Europe), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

E-commerce platform Shopify. To operate our online shop, we use Shopify, a service provided by Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5. This service provides an e-commerce platform through which we offer our goods for sale. The data transmitted as part of your order is stored on a Shopify server in the USA. Shopify is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. For further information on data protection, please see Shopify's data protection information at http://www.shopify.com/legal/privacy. As part of Shopify's aforementioned services, data may also be processed further on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc . or Shopify (USA) Inc.

Your rights
To exercise your rights, contact those responsible or contact us by email:

You have the following rights:
7.1 Revocation of consent
You can revoke your consent to the processing of personal data at any time with future effect.
The contact options above are available to you for this purpose.

7.2 Other Rights
You also have the following rights towards us with regard to your personal data:

right to information,
right to rectification,
Right to deletion or restriction of processing,
Right to object to processing,
Right to data portability,

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
The responsible data protection supervisory authority for Baden-Württemberg is:
Baden-Württemberg
The state commissioner for data protection and freedom of information in Baden-Württemberg
PO Box 10 29 32, 70025 Stuttgart
Königstraße 10a, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
Email: poststelle@lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de

contact form
If you send us inquiries using the contact form, we will only use your data to process your request. This data will not be used for advertising purposes or passed on to third parties.

The legal basis for the processing of data transmitted via the contact form or when sending an email is Article 6 Paragraph 1 Letter f of the GDPR. If the contact is also aimed at concluding a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR.

The data you enter in the contact form will be stored by us until you request us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies.

Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies. These are small text files that your web browser receives when you visit our pages and stores on your computer. Some of the cookies are deleted immediately after closing the browser. Other cookies remain permanently on your computer and enable us to recognize you or your computer the next time you visit our website.
This site uses the following types of cookies, the scope and functionality of which are explained below:

(a) Transient cookies, these are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, with which the various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

(b) Persistent cookies, which are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete cookies at any time in your browser's security settings. You can influence the use of cookies by changing your browser settings. Most browsers have an option that allows you to restrict or prevent the storage of cookies. Each browser is unique in the way it manages cookie settings. This is described in the respective help menu of your browser.

You can find these for the respective browsers under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DEHowever, please note that deactivating cookies may mean that only limited functions of the website are available to you.

The legal basis for the use of cookies is Article 6 (1) (f) GDPR.
Analysis tools

Use of Google Analytics
Our website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser plug-in available under the following link. Download and install in: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are further processed in abbreviated form, which means that any personal connection can be ruled out. If the data collected about you is personally related, this will be excluded immediately and the personal data will be deleted immediately.

We use Google Analytics to analyze the use of our website and to regularly improve it. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms and conditions: http://www.google.com/analytics/terms/de .html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the data protection declaration: http://www.google.de/intl/de/policies/privacy .

Right to object
You can object to the collection and storage of data for the purpose of usage analysis at any time with future effect by informing us of your objection: e.g. by email: your.crafty.care(at)gmail.com or Tel: will be submitted later.

The legal basis for the use of analysis tools is Article 6 Paragraph 1 Sentence 1 Letter f GDPR.

Social media links
We link on our website to the social media platforms Facebook, Instagram, YouTube and Pinterest by using the respective symbols. These are hyperlinks through which your data is not transmitted. If you click on the link, you will be immediately redirected to our respective social media presence. Your data will only be transmitted to the respective social media service if you are logged into your respective user account. In this case, the respective social media platform may receive information about what content you have viewed on our website.

The following are exclusively responsible for the social media services we link to:

for Facebook and its website, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;

for Instagram and its website, Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;

for YouTube and its website, YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA;

Pinterest Europe Ltd. for Pinterest and its website.
Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland;

For further information about the purpose and scope of data collection and about the further processing and use of your data by the respective social media service, please refer to the data protection guidelines of the respective platform.

Facebook Connect
We use the “Facebook Connect” service from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”) on our website. We offer you the opportunity to log in to our website with Facebook Connect if you have a Facebook profile and give us your express consent to exchange data with Facebook. In this case, additional registration is not required. To register, you will be redirected to the Facebook page, where you can log in with your usage data. This means your browser establishes a direct connection to Facebook's servers, linking your Facebook profile and our service. Through this link, Facebook receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. By linking, we automatically receive the following information from Facebook Inc., depending on your data protection setting on Facebook (name, email address, date of birth, address, Facebook name, user ID, age, gender and, if applicable, profile picture , the friends list and the likes). From this data, we only use your name, your email address, your date of birth and your address to create a user account, if you have approved these on Facebook. This information is necessary for the conclusion of the contract in order to be able to identify you.

For further information about Facebook Connect and privacy settings, please see the data protection information and terms of use of Facebook Inc. http://www.facebook.com/policy.php

If you do not want Facebook to link the data obtained via our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also exclude the Facebook Connect plugin using add-ons for your browser.

revocation

The consent given to the exchange of data via Facebook Connect can be canceled at any time in the future by sending a message to e-mail: your.crafty.care(at)gmail.com be revoked.

Newsletter
(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) To register for our newsletter we use the so-called double opt-in procedure. This means that after you register, we will send you an email to the email address you provided, in which we will ask you to confirm that you would like to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your email address. Providing further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter a GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email, by email to ( your.crafty.care(at)gmail.com ) or by sending a message to the contact details given in the legal notice.
To send our newsletters, we use the Omnisend service from Omnisend, LLC., London England. The data you store when you register for the newsletter (email address, name if applicable, IP address, date and time of your registration) will be transferred to a server operated by Omnisend, LLC.. in London and stored there in compliance with your requirements. Further information about data protection at Omnisend can be found at: https://www.omnisend.com/privacy/ .

(5) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in Section 3 and the web beacons with your email address and an individual ID. We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click in them and infer your personal interests.

Right to object
You can object to this tracking at any time by clicking on the special link provided in each email or by contacting us via another contact method, for example by email: your.crafty.care(at)gmail.com . The information will be stored for as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images in your email program by default. In this case, the newsletter will not be displayed to you in its entirety and you may not be able to use all functions. If you display the images manually, the tracking mentioned above occurs.

Use of social media plug-ins
On our website we use so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

We use the so-called two-click solution. This means that when you visit our site, no personal data will initially be passed on to Instagram. The plug-in in the form of images is provided with the heading “Follow us on Instagram”. We give you the opportunity to communicate directly with Instagram using the button. Only if you click on the marked field and thereby activate it will Instagram receive the information that you have accessed our website. In addition, the data mentioned in Section 1 of this declaration will be transmitted. By activating the plug-in, your personal data will be transmitted to Instagram and stored there (with US providers in the USA).
We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, or the storage periods. We also have no information about the deletion of the data collected by Instagram.

When you interact with the plug-in, especially by clicking on the plug-in image, your browser establishes a direct connection to Instagram's servers. The content of the plug-in is transmitted directly to your browser by Instagram and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted from your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. The information will also be published on your Instagram account and shown to your contacts there. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid being assigned to your Instagram profile.
Instagram saves the data collected about you as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Instagram to exercise this.

Further information on the purpose and scope of data collection and the further processing and use of the data by Instagram as well as your related rights and setting options to protect your privacy can be found in Instagram's data protection information: https://help.instagram.com/155833707900388/.
If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also completely block the Instagram plugins from loading using add-ons for your browser, e.g. B. with the script blocker “NoScript” (http://noscript.net/).
The legal basis for the use of the plug-ins is Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.

Remarketing/retargeting
(1) On our websites we use “Custom Audiences” from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for retargeting or remarketing purposes. This service uses so-called tracking or remarketing pixels. These are pixel image files that enable log file analysis. By using the pixels, the service provider can see when and how many users have accessed the pixel, or whether and when an email was opened or a website was visited.

(2) With the help of this service, users of the website can be shown interest-based advertisements (“Facebook Ads”) when they visit the social network Facebook or other websites that also use the process. Our aim is to show you advertising that is of interest to you in order to make our website more interesting for you. When you visit our website, a direct connection to the Facebook servers is established via the pixel. This enables Facebook to identify you based on your browser ID, as this can be linked to your user account. We have no influence on the extent and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding website of ours Visited our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifying features.

(3) Deactivating the “Facebook Custom Audiences” function is possible for logged in users at https://www.facebook.com/settings/?tab=ads#_.

(4) The legal basis for the processing of your data is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy/.
Right to object
If you do not want to be shown advertising generated by the respective targeting service, you can object to the use of retargeting technology on our websites by sending us a message your.crafty.care(at)gmail.com send.

Data security
We have taken a variety of security measures to protect your personal information. Our servers and databases are protected, among other things, by physical and technical measures.

When collecting and transmitting data via our website, we use standardized SSL encryption technology. Personal data is transmitted as part of the ordering process via SSL encryption, which can be recognized by the lock symbol in the browser and the addition “https://” in the address bar.

With encrypted communication, the payment details you transmit to us cannot be read by third parties. When communicating via email, 100% data security cannot be guaranteed.

Changes to this privacy policy
We can change this data protection declaration at any time. Any changes to this Privacy Policy will be posted on this website and will automatically take effect 30 days after being posted. We will inform you of any significant changes to this privacy policy by email.

--- Automated translation ---

Country/region

Language

Privacy Statement