We appreciate your interest in our online shop. The protection of your personal data is our top priority. In the following, we inform you about the processing of your personal data on our website in accordance with Art. 13 GDPR.
The responsible party within the meaning of data protection laws is:
Eckhard Singer
Meurerstraße 1
55469 Simmern
Email: saint.and.coco@web.de
A data protection officer is only legally required for companies above a certain size. Since we currently employ fewer than 20 people, we do not have a data protection officer. However, you can contact us at any time if you have any questions about data protection.
Each time you access our website, information necessary for delivering the pages is automatically transmitted. This data includes, in particular, the date and time of access, IP address, browser type/version, operating system, referrer URL, and the pages accessed. The temporary storage of the IP address is necessary to establish the connection to the website and to ensure the security of the information technology systems. .
The processing is based on Art. 6 (1) (f) GDPR, whereby our legitimate interest lies in the provision of the website and the maintenance of IT security. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. .
When you place an order through our shop, the following personal data is collected: first and last name, billing and delivery address, email address, telephone number (if applicable), and payment information. This data is required for the conclusion and processing of the contract and is processed on the basis of Art. 6 (1) (b) GDPR.
To fulfill the contract, we will share your data with service providers commissioned by us (e.g., shipping service providers, payment providers). This sharing occurs within the scope of order processing in accordance with Art. 28 GDPR. We process your data only for as long as it is necessary to process your order and to comply with statutory retention periods.
Our store is operated on the Shopify platform, provided by Shopify International Ltd., 2nd Floor, Victoria Buildings, 1 Haddington Road, Dublin 4, D04 XC62, Ireland.
Shopify stores personal data on servers in Canada and the USA. An EU adequacy decision has been made for Canada; data transfers to the USA are based on the EU-US Data Privacy Framework (DPF) and standard contractual clauses. For more information, see Shopify's privacy policy ( https://www.shopify.com/legal/privacy ).
Shopify acts as a data processor and processes the data only according to our instructions. When you use Shopify Checkout, your data is processed on our behalf to complete the order process.
We use cookies on our website to improve user experience and enable certain features. Cookies are small text files stored on your device. You can control whether cookies are accepted in your browser settings.
If we use cookies that are not strictly necessary for the operation of the website (e.g. marketing or analysis cookies), we will obtain your prior consent.
We use various payment service providers to process payments (e.g., PayPal, credit card, and Sofortüberweisung). Please refer to the privacy policy of the respective service provider for the data collected and the legal basis for processing.
We ship our goods worldwide. Deliveries to non-EU countries may incur customs duties or import taxes, which are the customer's responsibility. To process the shipment, we will transmit your address and, if applicable, your telephone number to the selected shipping service provider.
For international shipments, it may be necessary to pass on the data to the customs authorities.
You have the following rights in connection with the processing of your personal data:
Right to information (Article 15 GDPR): You can request information about your data stored by us.
Right to rectification (Article 16 GDPR): If your data is incorrect or incomplete, you can request its rectification.
Right to erasure (Article 17 GDPR): You can request the erasure of your data, provided that there are no statutory retention obligations to the contrary.
Right to restriction of processing (Art. 18 GDPR) and right to object (Art. 21 GDPR): You can restrict or object to the processing of your data for specific reasons.
Right to data portability (Article 20 GDPR): You can request that we transmit the data you have provided to you or a third party in a structured, common and machine-readable format.
Right to lodge a complaint (Article 77 GDPR): If you believe that we are processing your data unlawfully, you can contact a data protection supervisory authority .
To exercise your rights, please send an email to saint.and.coco@web.de . Requests will be processed within the statutory time limits.