Privacy policy

Privacy Policy

Person responsible for data processing is:
Alexander Imdahl
Biethsstr. 16/1
69121 Heidelberg

Email: ForgedCarbonShop@gmail.com

We are pleased to have your interest in our online shop. Protecting your privacy is very important to us. Below, we will provide you with detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our websites without giving any personal information. Each time a website is called up, the web server automatically stores a so-called server log file that contains information such as the name of the requested file, your IP address, date and time of access, data transmitted, and the requesting provider (access data). This access data is only evaluated for the purpose of ensuring a trouble-free operation of the site and improving our offer. This serves to protect our legitimate interests that predominate in the context of a weighing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO. All access data is deleted at the latest seven days after the end of your visit to our site.

 Hosting

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in forms provided on this website will be processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.

Our service providers are based and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection through a decision: Canada.

Our service providers are based and/or use servers in the USA and in other countries outside the EU and the EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission.

2. Data processing for contract completion and for establishing contact

2.1 Data processing for contract completion

For the purpose of contract completion (including inquiries about and resolution of any existing warranty and performance claims and any legal obligation to update), in accordance with Art. 6 (1) (1) lit. b DSGVO, we collect personal data when you voluntarily provide it to us as part of your order. Required fields are marked as such, as we are required to collect this data to complete the contract and we cannot process the order without it. The data collected is evident from the relevant input forms.

More information on the processing of your data, especially the disclosure to our service providers for the purpose of order, payment and delivery processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiration of the tax and commercial storage periods according to Art. 6 (1) (1) lit. c DSGVO, unless you have explicitly consented to further use of your data according to Art. 6 (1) (1) lit. a DSGVO, or we reserve the right to use the data for a purpose that is legally allowed and about which we inform you in this statement.

2.2 customer account

If you have given your consent under Art. 6 (1) (1) lit. a GDPR by choosing to open a customer account, we use your data for the purpose of opening a customer account and for storing your data for future orders on our website. You can delete your customer account at any time either by sending a message to the contact option described in this privacy policy or through a designated function in your customer account. After deleting your customer account, your data will be deleted unless you have explicitly consented to further use of your data in accordance with Art. 6 (1) (1) lit. a DSGVO or we reserve the right to use your data beyond that which is legally allowed and inform you about this in this statement.

2.3 contact

In the course of customer communication, we collect personal data for processing your requests under Art. 6 (1) (1) lit. b GDPR if you voluntarily provide us with this information when you contact us (e.g. via contact form or email). Mandatory fields are marked as such, as we need these data in these cases to process your contact. The data collected can be seen in the respective input forms. After processing your request, your data will be deleted unless you have explicitly consented to further use of your data in accordance with Art. 6 (1) (1) lit. a DSGVO or we reserve the right to use your data beyond that which is legally allowed and inform you about this in this statement.

3. Data processing for shipping purposes

For the fulfillment of the contract according to Art. 6 (1) (1) lit. b DSGVO, we will pass on your data to the shipping service provider responsible for delivery, if this is necessary for the delivery of ordered goods.

4. Data processing for payment processing

In our online shop, we work with these partners for payment processing: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we will pass on the data necessary for the processing of the payment transaction to our technical service providers who act on our behalf in the context of contract processing, or to the appointed credit institutions or to the selected payment service provider, if this is necessary for the processing of the payment. This serves the fulfillment of the contract according to Art. 6 (1) (1) lit. b DSGVO. In part, the payment service providers themselves collect the data necessary for the processing of the payment, e.g. on their own website or through a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies. If you have any questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and optimization of your payment processes

If necessary, we give our service providers additional data, which they use together with the data necessary for payment processing as our processors for the purpose of fraud prevention and optimization of our payment processes (e.g. invoicing, handling of disputed payments, support of accounting). This serves our legitimate interests in securing against fraud and efficient payment management in accordance with Art. 6(1)(f) of the DSGVO.

4.3 Identity and Creditworthiness Check for Selection of Klarna Payment Services

Klarna Direct Debit, Invoice Payment via KlarnaIf you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we will forward your data for payment and contract processing in accordance with Art. 6(1)(b) of the DSGVO to Klarna. This transmission of data is necessary so that Klarna can create an invoice and perform an identity and creditworthiness check for the invoice processing you have requested. Please understand that we can only offer the respective Klarna payment method if it is made possible due to the results of the creditworthiness check. Detailed information on this and the credit bureaus used can be found in the Klarna Privacy information 

5. Email Advertising

5.1 Email Newsletter with Sign-up

When you sign up for our newsletter, we use the data required or separately communicated by you to send you our email newsletter regularly based on your consent as per Article 6 (1) (1) lit. a of the GDPR. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or through a designated link in the newsletter. After unsubscribing, we delete your email address from the recipient list, unless you have explicitly consented to further use of your data under Article 6 (1) (1) lit. a of the DSGVO or we reserve the right to use your data in a manner that is legally permitted and which we will inform you of in this statement.

5.2 Email Newsletter without Sign-Up and Your Right of Objection

If we receive your email address in connection with the sale of goods or services and you have not objected, we reserve the right to send you regular offers for similar products from our range by email on the basis of § 7 (3) of the UWG. This serves to protect our legitimate interests, which are predominant in the context of a balancing of interests, in advertising our customers. You can object to this use of your email address at any time by sending a message to the contact option described in this privacy statement or by using a designated link in the advertising email, without incurring any costs other than the basic transmission costs. After unsubscribing, we delete your email address from the recipient list, unless you have explicitly consented to further use of your data under Article 6 (1) (1) lit. a of the DSGVO or we reserve the right to use your data in a manner that is legally permitted and which we will inform you of in this statement.

5.3 Newsletter submission

The newsletter may also be sent by our service providers on our behalf as part of a processing. For questions regarding our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy statement.

Our service providers are located and/or use servers in the USA. There is no adequacy decision of the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission.

6. Cookies and other technologies

 General Informationen

To make your visit to our website attractive and to allow the use of certain functions, we use various technologies including so-called cookies on different pages. Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). We use technologies that are required for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process IP address, time of visit, device and browser information, and information about your use of our website (e.g. information about the contents of the shopping cart). This serves to weigh our legitimate interests in an optimized presentation of our offer in accordance with Art. 6 (1) (1) f DSGVO.

We also use technologies to meet legal obligations to which we are subject (e.g. to demonstrate consent to the processing of your personal data) and for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy. You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of these technologies in accordance with Art. 6 (1) (1) a DSGVO, you can revoke your consent at any time by sending a message to the contact options described in the privacy policy.

6.1 CCPA Opt-out for customers from California

https://forgedcarbonshop.com/pages/ccpa-opt-out 

he California Consumer Privacy Act (CCPA) provides you with rights regarding how your data or personal information is treated. Under the legislation, California residents can choose to opt out of the “sale” of their personal information to third parties. Based on the CCPA definition, “sale” refers to data collection for the purpose of creating advertising and other communications. Learn more about CCPA and your privacy rights.

How to opt out

By clicking on the link below, we will no longer collect or sell your personal information. This applies to both third-parties and the data we collect to help personalize your experience on our website or through other communications. For more information, view our privacy policy.

To be eligible to opt-out, you must be browsing from a CCPA region.

7. Use of Cookies and other technologies for web analysis and advertising purposes

If you have given your consent according to Art. 6(1) lit. a DSGVO, we use the following cookies and other technologies from third-party providers on our website. After the purpose has been fulfilled and the technology is no longer used by us, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the section "Cookies and other technologies". Further information including the basis of our cooperation with each provider can be found under the individual technologies. If you have questions about the providers and the basis of our cooperation with them, please contact the contact options described in this privacy policy.

 Use of Facebook services for web analysis and advertising purposes

 Facebook Ads (Ads Manager)

We advertise for this website on Facebook (by Meta) and other platforms through Facebook Ads. We determine the parameters of each advertising campaign. Facebook (by Meta) is responsible for the implementation, specifically the decision on where to place the ads for individual users. Unless stated otherwise, the processing of data is based on an agreement between jointly responsible parties as per Art. 26 DSGVO. The joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. The subsequent processing of data by Meta Platforms Ireland is not covered by this.

8. Social Media

 Our online precence on Facebook (by Meta), Instagram (by Meta)

If you have given your consent in accordance with Art. 6(1)(1) DSGVO to the respective social media provider, your data will be automatically collected and stored for market research and advertising purposes when visiting our online presence on the mentioned social media. Using pseudonyms, usage profiles will be created. These can be used to place advertisements inside and outside of the platforms that supposedly match your interests. For this, cookies are usually used. Please refer to the data protection information of the providers linked below for detailed information on the processing and use of data by the respective social media provider and for contact information and your rights and privacy settings. If you still need help, you can contact us.

Facebook (by Meta) is an offering by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is usually transmitted to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. Data processing in connection with a visit to a Facebook (by Meta) fan page is based on an agreement between jointly responsible parties as per Art. 26 GDPR. More information (information on Insights data) can be found here.

Instagram (by Meta) is an offering by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is usually transmitted to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. Data processing in connection with a visit to an Instagram (by Meta) fan page is based on an agreement between jointly responsible parties as per Art. 26 DSGVO. "

Further information (Information about Insights data) can be found here.

9. Contact options and your rights

9.1 your rights

As a subject, you have the following rights:

• According to Art. 15 of the DSGVO, the right to request information about your personal data processed by us to the extent specified there;
• According to Art. 16 of the DSGVO, the right to immediately request correction of incorrect or completion of your personal data stored with us;
• According to Art. 17 of the DSGVO, the right to request deletion of your personal data stored with us, unless further processing is required:
  • for the exercise of the right to freedom of expression and information;
  • to fulfill a legal obligationng;
  • for reasons of public interest or
  • to assert, exercise or defend legal claims;
• According to Art. 18 of the DSGVO, the right to request restriction of processing of your personal data, if:
  • the accuracy of the data is disputed by you;
  • the processing is unlawful, but you reject its deletion;
  • we no longer need the data, but you need it to assert, exercise or defend legal claims or
  • you have exercised your right to object under Art. 21 of the DSGVO;
• According to Art. 20 of the DSGVO, the right to receive your personal data provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller;
• According to Art. 77 of the DSGVO, the right to file a complaint with a supervisory authority. Usually, you can do this with the supervisory authority of your habitual residence or place of work or our company's headquarters..

Right or revoke If we process your personal data for the purposes of our predominant legitimate interests as explained above, you have the right to object to this processing with future effect. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you only have a right to object if there are grounds related to your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims. This does not apply if the processing is for direct marketing purposes. Then we will no longer process your personal data for this purpose.

9.2 Contact options

If you have any questions about the collection, processing, or use of your personal data, if you need information, correction, restriction, or deletion of data, or if you want to revoke consent or object to a specific use of data, please contact us directly using the contact details in our imprint.

Data protection declaration created in cooperation with Trusted Shops legal text editor and FÖHLISCH Rechtsanwälte.