The safety and the secrecy of your own personal information are of the utmost importance to us. In this document, we shall explain how your personal data is handled and processed by our company, as well as which measures are taken in order to ensure the maximum level of user privacy on this website. All of the data which is submitted through this website is handled with the highest confidentiality, pursuant to the directives listed in the General Data Protection Regulation (GDPR) and in accordance with the specific national data protection regulations, such as the Bundesdatenschutzgesetz neu (BDSG neu) or the Telemediengesetz (TMG). The processing of the abovementioned data may occur either due to your own personal consent in compliance with GDPR Art. 6, 1a, due to performance or initiation of a contract in compliance with GDPR Art. 6, 1b, due to legal obligations we may undergo in compliance with GDPR-Art. 6, 1c, or due to the defense of any legitimate interests on our part in compliance with GDPR-Art. 6, 1f.
Personal data means any information related to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors spec
‘Processing’ means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The personal data you submit via our website is only processed in order to communicate with you and to accomplish the purposes for which you made the information available to us in the first place.
With each access to our website, our system automatically stores information transmitted by your internet browser during your activity on our website. Such information is only stored temporarily and, should certain content be downloaded from our website, it leaves a trace in a specific log file. More specifically, the following information is stored with every access / download:
The data is processed in compliance with GDPR Art. 6, 1f complying with our legitimate interest in improving and stabilizing our website’s functionality. The transfer and disclosure of personal data or its use in any other context is absolutely excluded. We reserve ourselves the right, though, to refer to our server log files in case they may contain evidence leading to the exposing of illegal activity.
If you consent to receiving our newsletter, your e-mail address will be used for our marketing purposes until you express your will to revoke that permission. In order to customize newsletters, it is possible to voluntarily enter title, first and / or last name upon registration. Such newsletter registration is completely reversible and can be cancelled at any moment via the ‘unsubscribe’ link provided in every newsletter issue. Alternatively, you can unsubscribe from all future issues of our newsletter without any additional costs other than those linked to the forwarding of your request (phone call, mobile data traffic, etc.):
The personal data (i.e. first name, last name, phone number, address, e-mail address) provided by you via the contact form is used in order to communicate with you, for the processing of your requests, or for any other purpose you made the information available to us for in the first place.
Any other use of your personal data is excluded, except in utterly anonymous form for statistical analysis only.
As we may employ external providers for the fulfilment of our services, the resulting contractual relationship is established in compliance with the already mentioned European General Data Protection Regulation (GDPR) and Bundesdatenschutzgesetz neu (BDSG neu). This applies for the following categories of recipients:
We may share anonymous data with our partners, for the performance of statistical analysis. Our partners are not allowed to make any use of your data which is not strictly relevant to our offers and services.
We collect and process your personal data in order to allow transactions on our Online Shop, so that you may be able to purchase our products and services as well as in order for payment and delivery to be completed successfully. The personal data we collect contains information such as first and last name, date of birth, billing and shipping addresses, phone number, e-mail address and chosen method of payment. Said data is thus transferred to our system after being encrypted and, if necessary, is securely forwarded to our commercial partners, such as financial and logistics service providers.
On our website, it is possible to create an account with personal information. The resulting registration has the only purpose of offering a better user experience to our customers, allowing improved pre-purchase support, as well as an easy fulfilment and billing of the contract. Should you request the termination of your customer account, the whole data present in it will be deleted, unless legal obligations pertaining business, taxation and or management issues have to be considered.
Our Online Shop uses session cookies for the correct listing of the products in the shopping basket, as well as permanent cookies for the monitoring of the log-in status. We only transfer your data to third parties to allow shipping and billing processes, or in case of legal obligations towards legal representatives and institutions. Data transfer to third countries is only admissible when necessary in compliance with the fulfilment of the contract
The personal information submitted via our website is stored for no longer than the time needed for the purpose it was submitted for in the first place. In case legal obligations in regard to business, taxation and or management issues have to be considered, retention periods range from 6 up to 10 years.
As ‘subject’ whose data we process, you are granted a number of rights by the European General Data Protection Regulation. You have the right to be informed about which data is being processed and for which purpose, as well as about the categories of the processed data, about the recipients and / or recipient categories who were allowed access to your information, about the planned storage period of your data and the criteria used to determine said period. Should you decide to withdraw your consent regarding the processing and / or the storage of your personal data, or should your data be incorrect, you have the right to its deletion, processing limitation, or rectification. Upon your request, we will delete your personal data, reduce the extent of its processing, or perform the necessary corrections, provided that it all complies with the norms in force at that given moment. Moreover, you have the right to withdraw your consent for any future processing of your data, as well as the right to its transferability and the right of complaint at the pertaining supervisory authority.
We use state-of-the-art encryption methods (e.g. SSL) on HTTPS, in order to protect the privacy of your personal data during its transfer.
In order for our website content to be displayed in a correct and appealing fashion on the wide variety of internet browsers, we use script and font libraries such as Google Webfonts (https://www.google.com/webfonts/). Google Webfonts are used to avoid multiple loading instances in the cache of your internet browser. In case Google Webfonts are not supported or accessible by your internet browser, the written content of our website will be shown using a standard font.
With every access to script and font libraries, a connection to the provider of these services is established automatically and it is thus possible that the provider might collect data. Whether this actually happens and for which purposes are matters of pure speculation, though.
At the following link you will find the Data Protection Policy of the library provider (Google): https://www.google.com/policies/privacy/
Our website uses Google Analytics, a web analysis service by Google Inc. (Google). Google Analytics uses ‘cookies’, text files which are stored locally in the visitor’s internet browser, thus allowing the analysis of the website to take place throughout your visit. The information about your visit on the website is collected through a dedicated cookie and is generally transferred and stored into a Google Server located in the USA. The IP address resulting from your internet browser is not associated to any other data by Google. On our website, we implemented the code ‘anonymizeIP’ for Google Analytics, thus ensuring the secrecy of your IP address. This way, only anonymous data can be collected. Only in exceptional cases the whole IP address is transferred to the Google Servers in the USA, where it is in any case abridged.
On behalf of our website provider, Google will analyze your experience on the website via the collected information, as well as creating reports about the general website activity and providing other services related to the use of the website and / or the Internet, which may be possibly requested by the operator of the website.
It is possible to deactivate cookies via an option provided by your internet browser, we have to inform you, though, that in this case the use of our website may be subject to some limitations. It is possible to deactivate the acquisition of the data stored in the cookie during your activity on the website (including your IP address), thus preventing it from being gathered and analyzed by Google. To do so, you need to download and install the following plugin available at this address: https://tools.google.com/dlpage/gaoptout?hl=en . As an alternative, especially for internet browsers operating on smartphones and tablets, it is possible to disable the data acquisition process by Google Analytics simply by clicking on the same link. An ‘opt-out cookie’ will be created, which will prevent any further gathering of your data on every future access to this website. The opt-out cookie will only be valid for the current internet browser and solely for our website. It will be stored in your device, so if you delete cookies from your internet browser, the opt-out cookie will have to be created again.
We use Google Analytics to analyze data from Double Click cookies and AdWords, for statistical purposes. If you do not wish to consent to this use, you can deactivate this option in the ad-preferences menu (http://www.google.com/settings/ads/onweb/?hl=en).
In order to improve communication with users and customers, those browsing our website may contact us via Zopim, a chat program by Zendesk, Inc., (‘Zendesk’).
The information about the user’s activity on the website (including the anonymized IP address) is gathered via the respective cookie and transmitted to the Zendesk servers in the USA and stored therein. We store the individual ID number and the time of registration in an encrypted cookie on your computer for the usage period only. This cookie allows you to freely browse our website from page to page, without having to register every single time. As soon as you log off, the related cookies are deleted from your computer, whereas the chat content is logged and stored. You can disable the acceptance of cookies via the related settings in your internet browser, although in that case we cannot guarantee the full and correct functioning of our website.
In addition to the information on data protection specific for this website, the following directives from the European General Data Protection Regulation apply as well:
Occasionally, we redirect visitors to third-party websites. Even though we choose our partners and select their websites most carefully, we can neither improve nor guarantee the accuracy and completeness of their content, as well as we cannot take any responsibility concerning the security of customer data on these third-party websites. This data protection policy does not apply to linked third-party websites. All of the information contained in this website has been checked with the utmost care and attention, nevertheless, we cannot guarantee that all of the information available on or through our website be always correct, complete and up-to-date. Any important changes to this data protection policy will be made available on this webpage.
This data protection policy is to be considered as part of the commercial offer on our website. Should any particular formulations or passages in this text not entirely or partly comply with the actual legal norms, the validity and content of the remaining articles in this text will not thereby be affected.
© 11/2018 ROOTTATTOO GmbH