Privacy policy
1. Information Regarding the Collection of Personal Data and the Contact Information of the Data Controller
2. Data Collection When You Visit Our Website
3. Cookies
4. Data Processing for Order Fulfillment
5. Data Processing When Opening a Customer Account and for Contract Fulfilment
6. Making Contact
7. Use of Single Sign-On Procedures
8. Use of Your Data for Direct Marketing
9. Use of Social Media: Social Plugins
10. Use of Social Media: Video
11. Rights of the Data Subject
12. Retention Period for Personal Data
1. Information Regarding the Collection of Personal Data and the Contact Information of the Data Controller
1.1 Thank you for visiting our website. Below, we would like to inform you about how we handle your personal data when you use our website. Personal data generally refers to any data that can be used to identify you personally.
1.2 The controller responsible for data processing on our website within the meaning of the General Data Protection Regulation (GDPR) is:
Lucas Teufel
Beuerfelder Str. 6
96486 Lautertal
Germany
Tel.:01734685046
E-Mail: mail@voidtattooink.com
2. Data Collection When You Visit Our Website
Every time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called “server log files”). The following data, which is technically necessary for us, is collected in the process:
*The website we visited
*Date and time at the time of access
*Amount of data sent in bytes
*Source/link that brought you to this page
*Operating system used
*Browser used
*IP address used (if applicable: in anonymized form). The legal basis for processing is Article 6(1)(f) of the GDPR, based on our legitimate interest in improving the stability and maintaining the functionality of our website. The data is not disclosed or used for any other purpose. The system’s temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
We reserve the right to review server log files retroactively if there are specific indications of unlawful use. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.
If the data is stored in log files, this occurs no later than seven days after collection. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or anonymized so that the requesting client can no longer be identified. The collection of data for the purpose of providing the website and the storage of data in log files are absolutely necessary for the operation of the website. Consequently, users have no right to object.
3. Cookies
Our website uses cookies.
Cookies are text files that are stored on the user’s device. When a user visits a website, a cookie may be stored on the user’s operating system. Some features of our website cannot be provided without the use of cookies. This requires that the browser be recognized even after the user navigates to another page. The user data collected through technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data pursuant to Article 6(1)(f) of the GDPR is also based on the purposes mentioned above.
In addition, our website uses cookies that enable us to analyze users’ browsing behavior (so-called third-party cookies). For more information on the scope, purpose, legal basis, and options for objecting, please refer to the relevant sections of the respective chapter in this Privacy Policy.
As a user, you have full control over the use of cookies. By changing the settings in your web browser, you can disable, restrict, or delete cookies. If you disable cookies for our website, you may no longer be able to use all of the website’s features to their full extent. You can prevent the transmission of Flash cookies by changing the settings in Flash Player.
For help with the settings, see the Help menu in your browser using the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted when you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information—such as browser and location data, as well as IP addresses—to the extent applicable to each individual case. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
4. Data Processing for Order Fulfillment
4.1 If you wish to place an order in our online store, you must provide your personal information—which we need to process your order—in order to conclude the contract. We process the information you provide to fulfill your order.
In some cases, we work with external service providers to process your order. To do so, we must share the necessary personal data with them.
If we engage a shipping company to deliver your goods, we will share the information necessary for delivery with that shipping company. To process payments, we will share your information with the designated financial institution to the extent necessary. If we use payment service providers, you will also be informed of this below.
Rechtsgrundlage für die Weitergabe Ihrer Daten ist Art. 6 Abs. 1 lit. b DSGVO.
4.2 Use of Payment Service Providers
– Paypal
If you select PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal as your payment method, payment processing will be handled by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).
We disclose your personal data to PayPal to the extent necessary, in accordance with Article 6(1)(b) of the GDPR. PayPal reserves the right to conduct a credit check for the following payment methods: credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal.
For this purpose, your payment information may be shared with credit bureaus in accordance with Article 6(1)(f) of the GDPR, based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check—specifically, the statistical probability of default—to decide whether to make the respective payment method available.
The credit report may contain probability values (so-called “score” values). To the extent that score values are included in the credit report’s results, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values takes into account, among other things, but not exclusively, address data.
The specific types of data collected by PayPal are outlined in PayPal’s privacy policy. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
5. Data Processing When Opening a Customer Account and for Contract Fulfilment
When you open a customer account with us, personal data is collected and processed in accordance with Article 6(1)(b) of the GDPR. The scope of the data is indicated on the input form. We store and use the data you enter for the purpose of fulfilling the contract.
You can delete your customer account at any time. You can do this by sending a message to the data controller’s address or, if available, directly through your customer account. In that case, we will also block your data in accordance with retention periods under tax and commercial law and delete it once those periods have expired. This can only be prevented by your consent to permanent storage or by another legally permitted use of your data on our part.
6. Making Contact
If you contact us via the contact form, the data you enter in the form will be transmitted to us and stored. The data collected is listed in the respective form. If you contact us via email, only the data you enter in the email will be transmitted to us.
The data is used exclusively for the purpose of processing the conversation and your inquiry. The legal basis for processing the data, provided the user has given consent, is Article 6(1)(a) of the GDPR. The legal basis for processing data transmitted when sending an email is Article 6(1)(f) of the GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected, provided that no statutory retention obligations preclude this. For personal data entered in the contact form and data sent via email, this is the case once the respective conversation with the user has ended. The conversation is considered concluded when the circumstances indicate that the matter in question has been definitively resolved. The user may revoke their consent to the processing of personal data at any time. If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
7. Use of Single Sign-On Procedures
Facebook Connect Sign-in
We use “Facebook Connect” on our website, a plugin provided by the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) (hereinafter referred to as “Facebook”).
This allows you to sign up to create a customer account or log in using the so-called single sign-on technology if you have a Facebook profile. When you visit one of our websites that features such a plugin, your browser establishes a direct connection to Facebook’s servers. In the process, the content of the plugin is loaded from Facebook
sent directly to your browser and embedded in the page. This informs Facebook that your browser has accessed the respective website, even if you do not have a Facebook profile or are not logged into Facebook at that moment. This information (including your IP address) is transmitted directly from your browser to a Facebook server and stored there, and may also be transferred to the United States.
Our legitimate interest lies in enabling a quick and straightforward registration process for our customers. The legal basis is therefore Article 6(1)(f) of the GDPR.
Facebook's legitimate interest lies in displaying personalized advertisements based on users' browsing behavior; the legal basis is therefore Article 6(1)(f) of the G
You can also register and log in to our website using your Facebook credentials without using the Facebook button.
Only if you have given your explicit consent in accordance with Article 6(1)(a) of the GDPR regarding the sharing of data with Facebook prior to the registration process will we receive the general and publicly available information stored in your profile from Facebook when you use the Facebook button. This sharing takes place only in accordance with your personal privacy settings on Facebook. This information includes, among other things, your user ID, name, profile picture, age, and gender.
Please note that, following changes to Facebook’s Privacy Policy and Terms of Service, granting your consent may also result in the transfer of your profile pictures, your friends’ user IDs, and your friends list, provided that you have marked these as “public” in your Facebook privacy settings.
We store and process the data provided to us by Facebook to create a user account containing the necessary information. Based on your consent, we may also transfer data (e.g., information about your browsing or purchasing behavior) to your Facebook profile.
You may revoke your consent at any time by sending a message to the data controller responsible for processing your data.
Facebook Inc., headquartered in the United States, is certified under the U.S.-EU Privacy Shield framework, which ensures compliance with the data protection standards in effect in the EU.
For more information, please refer to Facebook's privacy policy: http://www.facebook.com/policy.php
If you do not want the data collected on our website to be linked to your Facebook profile, you must log out of Facebook before visiting our website.
You can also completely prevent Facebook plugins from loading by using browser add-ons, such as “Adblock Plus” (https://adblockplus.org/de/).
8. Use of Your Data for Direct Marketing
9. Use of Social Media: Social Plugins
9.1 Facebook as the Default Plugin
We use social plugins (“plugins”) from the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) (hereinafter referred to as “Facebook”) on our website.
You can usually recognize the plugins by the Facebook logo, which is typically a white “f” on a blue background. You can view other versions of the Facebook plugin here:
https://developers.facebook.com/docs/plugins
When you visit one of our web pages that includes such a plugin, your browser establishes a direct connection to Facebook’s servers, and Facebook transmits the plugin’s content directly to your browser—even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the United States and stored there.
If you are logged into Facebook at the relevant time, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with a plugin (e.g., by clicking the “Like” button or commenting on something), this information is also transmitted directly to a Facebook server and stored there. These actions may be published on your Facebook profile and displayed to your Facebook friends.
Our legitimate interest lies in displaying personalized advertisements and maximizing the financial potential of our website. The legal basis is Article 6(1)(f) of the GDPR.
Facebook’s legitimate interest lies in displaying personalized advertisements and tailoring the service to users’ needs. The legal basis is Article 6(1)(f) of the GDPR.
If you do not want the data collected through our website to be linked to your Facebook profile, you must log out of Facebook before visiting our website. You can also prevent the Facebook plugins from loading by using browser add-ons, such as the script blocker “NoScript” (http://noscript.net/).
Facebook Inc., headquartered in the United States, is certified under the U.S.-EU Privacy Shield framework, which ensures compliance with the data protection standards in effect in the EU.
For more information, please refer to Facebook's privacy policy:
http://www.facebook.com/policy.php
9.2 Instagram als Standard-Plugin
We use social plugins (“plugins”) from the social network Instagram (Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA) (hereinafter referred to as “Instagram”) on our website.
You can usually recognize the plugins by the “Instagram camera” icon. You can view other versions of the Instagram plugin here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.
When you visit one of our web pages that includes such a plugin, your browser establishes a direct connection to Instagram’s servers, and Instagram transmits the plugin’s content directly to your browser—even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the United States and stored there.
If you are logged into Instagram at the relevant time, Instagram can directly associate your visit to our website with your Instagram profile. If you interact with a plugin (e.g., by clicking the “Instagram” button or commenting on something), this information is also transmitted directly to an Instagram server and stored there. These actions may be posted on your Instagram profile and displayed to your Instagram friends.
Our legitimate interest lies in displaying personalized advertisements and maximizing the financial potential of our website. The legal basis is Article 6(1)(f) of the GDPR.
Instagram’s legitimate interest lies in displaying personalized advertisements and tailoring the service to users’ needs. The legal basis is Article 6(1)(f) of the GDPR.
If you do not want the data collected through our website to be linked to your Instagram profile, you must log out of Instagram before visiting our website. You can also prevent the Instagram plugins from loading by using browser add-ons, such as the script blocker “NoScript” (http://noscript.net/).
Instagram's Privacy Policy: https://help.instagram.com/155833707900388/
10. Use of Social Media: Video
Use of YouTube Videos
On this website, we use the YouTube embedding feature to display and play videos from the provider “YouTube,” which is owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the enhanced privacy mode, which, according to the provider, does not begin storing user information until the video(s) are played. When you start playing embedded YouTube videos, the provider “YouTube” uses cookies to collect information about your user behavior. According to “YouTube,” these cookies are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged in to Google at the time, your data will be directly associated with your account.
If you do not want your data to be linked to your YouTube profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.
Such processing is carried out, in particular, in accordance with Article 6(1)(a) of the GDPR on the basis of your explicit consent.
You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. Regardless of whether the embedded videos are played, a connection to the Google network “DoubleClick” is established every time this website is accessed, which may trigger further data processing operations beyond our control.
Data may also be transferred to the servers of Google LLC in the United States. In the event that personal data is transferred to Google LLC, which is headquartered in the United States, Google LLC has obtained certification under the U.S.-EU Privacy Shield framework, which ensures compliance with the data protection standards applicable in the EU. For more information on data protection on “YouTube,” please see the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacyOpt-out available at:
https://adssettings.google.com/authenticated.
11. Rights of the Data Subject
11.1 Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we provide information below:
– Right of access pursuant to Article 15 of the GDPR:
You may request confirmation from the data controller as to whether personal data concerning you is being processed by the data controller. In addition, you have the right to obtain information regarding the purpose of the processing, the categories of personal data, the recipients, the planned duration of storage, and the existence of further rights—such as the right to rectification of the data or the right to lodge a complaint with a supervisory authority—as well as the origin of your data if it was not collected by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, the significance of such processing for you, and the intended effects of such processing, as well as your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries;
– Right to rectification under Article 16 of the GDPR:
You have the right to have any inaccurate data concerning you corrected without delay and/or to have any incomplete data we have stored about you completed; such correction or completion must be made without delay.
– Right to restriction of processing under Article 18 of the GDPR:
You have the right to request the restriction of the processing of your personal data while the accuracy of your data—which you have disputed—is being verified; if you object to the erasure of your data due to unlawful processing and instead request the restriction of the processing of your data; if you need your data to assert, exercise, or defend legal claims, after we no longer need this data once the purpose has been fulfilled, or if you have objected on grounds related to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
If the processing of your personal data has been restricted, such data—with the exception of its storage—may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State. If the restriction on processing has been lifted, the controller will notify you before the restriction is lifted.
– Right to erasure under Article 17 of the GDPR:
You have the right to have your personal data erased without delay if the conditions set forth in Article 17(1) of the GDPR are met. However, this right to erasure does not apply—in particular, but not exclusively—if the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;
– Right to be informed under Article 19 of the GDPR:
If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this is impossible or would involve a disproportionate effort. You also have the right to be informed of these recipients.
– Right to data portability pursuant to Article 20 of the GDPR:
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another data controller, to the extent that this is technically feasible;
– Right to withdraw consent pursuant to Article 7(3) of the GDPR:
You have the right to object at any time to the processing of your personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.
You also have the right to withdraw your consent under data protection law at any time, effective for the future. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal.
– Right to lodge a complaint under Article 77 of the GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority—in particular, in the Member State where you reside, where you work, or where the alleged infringement occurred—if you believe that the processing of your personal data violates the GDPR.
11.2 Right to Object
You have the right to object to the processing of your data at any time with future effect if we process your data based on our overriding legitimate interest following a balancing of interests.
If you exercise this right to object, we will cease processing your data unless there are demonstrably compelling legitimate grounds for continuing the processing that override your objection, or unless further processing is necessary for the establishment, exercise, or defense of legal claims.
12. Retention Period for Personal Data
The length of time personal data is stored depends on the applicable statutory retention periods. Once these periods have expired, we routinely delete the data if it is no longer necessary for the performance or initiation of a contract and/or if we no longer have a legitimate interest in continuing to store it.