Privacy policy
Falls du die Datenschutzerklärung lieber in deutscher Sprache als PDF lesen möchtest, klicke hier.
Privacy Policy 🇺🇸
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for concluding a contract. You are not obligated to provide the data, and failure to provide it will have no consequences. This applies only as long as no other indication is made in the following processing operations.
"Personal data" refers to any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our website without providing any personal information. Each time you access our website, usage data is transmitted to us or our web hosting/IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. Processing is carried out based on Article 6(1)(f) of the GDPR, based on our predominant legitimate interest in ensuring the uninterrupted operation of our website and improving our offerings.
Your data may be transferred and processed in third countries outside the EU, particularly in Canada and the USA. The European Commission has issued an adequacy decision for Canada. For the USA, an adequacy decision exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s standard contractual clauses.
A. Contact
Data Controller
You can contact us at any time. The data controller for processing personal data is:
Jan-Luca Blohm
c/o Impressumservice Dein-Impressum
Stettiner Straße 41, 35410 Hungen
Email: ceo@bobbysdesigns.com
Customer-Initiated Contact via Email
When you initiate contact with us via email, we collect your personal data (name, email address, message content) only to the extent you provide it. The processing of this data serves to handle and respond to your inquiry. If your contact is related to pre-contractual measures (e.g., product inquiries, quote requests) or an existing contract with us, processing is based on Article 6(1)(b) GDPR.
If contact is made for other reasons, processing is based on Article 6(1)(f) GDPR, as it is in our legitimate interest to process and respond to your request. In this case, you have the right to object at any time for reasons arising from your particular situation. Your email address will only be used for processing your inquiry. Your data will then be deleted in compliance with legal retention periods unless you have consented to further processing.
Collection and Processing via Contact Form
When you use our contact form, we collect your personal data (name, email address, message content) only in the scope provided by you. The data processing serves the purpose of communication.
If the contact relates to pre-contractual measures (e.g., product inquiries, quote requests) or an existing contract with us, processing is based on Article 6(1)(b) GDPR. Otherwise, processing is based on Article 6(1)(f) GDPR due to our legitimate interest in responding to inquiries. You may object to this processing at any time for reasons related to your particular situation. Your email address is only used for handling your request, and your data will be deleted in accordance with legal retention periods unless you consent to further processing.
Collection and Processing of Uploaded Images
We provide an upload function on our website for image files, allowing you to securely submit images to us. If you send images, we may collect personal data (e.g., identifiable persons in the image) only to the extent provided by you. The data processing serves the purpose of creating personalized products, using the image as a template (e.g., for T-shirt printing). Processing is based on Article 6(1)(b) GDPR, as it is necessary for contract fulfillment.
Data may be shared with service providers for processing orders, but not with other third parties. Your image will only be used for service delivery and will be deleted according to legal retention periods unless you consent to further use.
Sending Images via Email
You can also send images via email for personalized products. In this case, we may collect personal data (e.g., identifiable persons in the image) only to the extent provided. The data processing serves the purpose of creating personalized products, using the image as a template (e.g., for T-shirt printing). Processing is based on Article 6(1)(b) GDPR, as it is necessary for contract fulfillment. No data will be shared with third parties. Your image will only be used for service delivery and will be deleted in accordance with legal retention periods unless you consent to further processing.
B. Orders
Collection, Processing, and Transfer of Personal Data for Orders
When placing an order, we collect and process your personal data only as necessary to fulfill and process your order and handle your inquiries. Providing this data is required for the contract conclusion. Failure to provide it will prevent the contract from being concluded. Processing is based on Article 6(1)(b) GDPR.
Data may be shared with shipping companies, dropshipping or fulfillment providers, payment service providers, order processing service providers, and IT service providers. Data transmission is minimized and strictly adheres to legal requirements.
Your data may be transferred to third countries outside the EU, particularly to Canada and the USA. The European Commission has issued an adequacy decision for Canada. For the USA, an adequacy decision exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s standard contractual clauses.
C. Advertising
Use of Personal Data for Postal Advertising
We use your personal data (name, address) obtained during a product or service purchase to send postal advertising unless you have objected. Processing is based on Article 6(1)(f) GDPR, based on our legitimate interest in direct advertising. You may object to this use at any time by contacting us using the details provided in the imprint.
Use of Email Address for Newsletter Distribution
We use your email address for our own advertising purposes via newsletters, provided you have given explicit consent. Processing is based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of prior processing. You can unsubscribe via the link in the newsletter or by notifying us. Your email address will then be removed from our mailing list.
D. Shipping Providers
Sharing Email Address with Shipping Companies for Tracking
If you consent during the ordering process, we may share your email address with the shipping provider for delivery status updates. Processing is based on Article 6(1)(a) GDPR. You may withdraw consent at any time by notifying us or the shipping provider.
E. Payment Providers
We use PayPal Checkout, Klarna, and other payment providers. By selecting a payment method, personal data may be transmitted to these providers for payment processing. Processing is based on Article 6(1)(b) GDPR. Some providers may conduct credit checks. Further details can be found in their respective privacy policies:
F. Data Subject Rights & Retention Period
Retention Period
After full contract fulfillment, data is retained for warranty purposes and to comply with legal retention periods. After expiration, data is deleted unless you have consented to further use.
Your Rights
You have rights under Articles 15-20 GDPR, including access, rectification, deletion, processing restriction, and data portability. You also have the right to object to processing based on Article 6(1)(f) GDPR.
last update: 10/22/2024