Privacy policy

1) Information about the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Simon Festl, Simon Festl, Schneidergasse 1, 93342 Saal, Germany, Tel.: 015161093148, E -Mail: info@festl-simon.de. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Used browser
  • Operating system used
  • IP address used (if necessary: in anonymous form)

The processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

Hosted by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be processed on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the event that data is transmitted to Shopify Inc. in Canada, the European Commission’s adequacy decision ensures the appropriate level of data protection. For more information about Shopify's privacy policy, visit the following website: https://www.shopify.de /legal/privacy policy
Further processing on servers other than those of Shopify mentioned above will only take place within the framework communicated below.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called “session cookies”), some of these cookies remain on your end device for a longer period of time and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings in your web browser. If individual cookies used by us also process personal data, the processing takes place in accordance with Article 6 Paragraph 1 Letter b GDPR either for the execution of the contract, in accordance with Article 6 Paragraph 1 Letter a GDPR in the case of a granted consent or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) Contact

When you contact us (e.g. via contact form or e-mail), personal data will be processed - exclusively for the purpose of processing and answering your request and only to the extent required for this. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the facts in question have been finally clarified and provided there are no legal storage obligations to the contrary

6) Data processing when opening a customer account

According to Article 6 Paragraph 1 Letter b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the relevant form on our website. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded have been completed, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.

7) Use of customer data for direct advertising

7.1 Subscription to our email newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you only receive the newsletter if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6 (1) (a) GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data we collect when registering for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned at the beginning. After you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

7.2 Goods availability notification by email

For temporarily unavailable items, you can opt-in to receive email notifications of stock availability. We will send you a one-time email message about the availability of the item you have selected. The only mandatory information for sending this notification is your e-mail address. Providing further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending e-mails, which ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6 (1) (a) GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data collected by us when registering for our email notification service for the availability of goods is used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a message to the person responsible mentioned above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration .

8) Data processing for order processing

8.1 Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be forwarded to the commissioned transport company and the commissioned bank in accordance with Article 6 Paragraph 1 lit. b GDPR passed on.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provide when ordering (name, address, e-mail address) in order to inform you within the framework of our legal information obligations in accordance with Art 6 (1) (c) GDPR by means of a suitable means of communication (e.g. by post or e-mail) about upcoming updates within the period stipulated by law. Your contact details will be used strictly earmarked for notifications about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the information in question.

To process your order, we also work together with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Passing on of personal data to shipping service providers

-DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will provide your e-mail address in accordance with Article 6(1)(a) GDPR before the goods are delivered for the purpose of coordinating a delivery date or for delivery notification to DHL, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible.
Consent can be revoked at any time with effect for the future to the person responsible or to the transport service provider DHL.

8.3 Use of payment service providers (payment services)

- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we send the information you provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this. For more information about Shopify Payments' privacy policy, please visit the following web address: https://www.shopify.com/legal/privacy.
Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

9) Page functionalities

Use of Youtube videos
This website uses the YouTube embedding function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Here, the extended data protection mode is used, which, according to the provider, only initiates the storage of user information when the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider "Youtube" uses cookies to collect information about user behavior. According to information from "Youtube", these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC. come in the US. Regardless of whether the embedded videos are played back, a connection to the Google network is established each time this website is accessed, which can trigger further data processing operations without our influence.
All of the processing described above, in particular the reading of information on the end device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. Without this consent, YouTube videos will not be used during your visit to the site.
You can withdraw your consent at any time with effect for the future. In order to exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website via alternative options communicated to you on the website.
You can find more information on data protection at "Youtube" in the YouTube terms of use at https:// www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy

10) Tools and Miscellaneous

- PayJoe
We use the “PayJoe” service from NetConnections GmbH, Jesinger Str. 52, 73230 Kirchheim unter Teck (“PayJoe”) to do the bookkeeping. PayJoe acts as an interface between the payment service providers used and our accounting software, in that the service prepares individual transactions from the payment service providers and enriches them with receipt data. Incoming payments, reimbursements, fees and payment amounts from the payment service provider can be automatically recorded and processed in the accounting software used. In addition, PayJoe enables the automatic and format-appropriate transmission of physical or digital incoming invoices to the accounting software used for recording there.
If personal data is also processed during these processes, the processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interests in the efficient organization and documentation of our business processes as well as in an appropriate and complete accounting process.
We have concluded an order processing contract with NetConnections GmbH as the operator of PayJoe, with which we oblige the company to protect our customers' data and not to pass it on to third parties.
You can find more information about PayJoe's data protection regulations at https://www.payjoe.de /privacy policy.html
- sevDesk
We use the sevDesk service, the cloud-based accounting software from sevDesk GmbH, Hauptstrasse 115, 77652 Offenburg, to do the bookkeeping.
SevDesk processes incoming and outgoing invoices and, if necessary, also the bank transactions of our company in order to automatically record invoices, match them to the transactions and create the financial accounting from them in a partially automated process.
If personal data is also processed here, the processing is carried out in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.
More information about sevDesk GmbH, the automated processing of data and the data protection regulations can be found at https://sevdesk .de/security-data-protection/

11) Rights of the data subject

11.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:< /p>

  • Right to information according to Art. 15 GDPR;
  • Right to rectification according to Art. 16 GDPR;
  • Right to erasure according to Art. 17 GDPR;
  • Right to restriction of processing in accordance with Article 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability according to Art. 20 GDPR;
  • Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR;
  • Right to complain according to Art. 77 GDPR.

11.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPREHENSIVE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS FOR THE CERTIFICATION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - also based on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of an express consent in accordance with Article 6 Paragraph 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.

If there are legal retention periods for data that are processed within the framework of legal or similar obligations on the basis of Article 6 (1) (b) GDPR, this data will be routinely deleted after the retention period has expired, provided that it is no longer required to fulfill the contract or contract initiation are required and/or we have no legitimate interest in further storage.

When personal data is processed on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises his or her right to object under Article 21 (1) GDPR, unless we can prove compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When personal data is processed for the purpose of direct advertising on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises his or her right to object under Article 21 (2) GDPR.

Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.< /p>