Privacy Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This applies only insofar as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.

Contact

Controller
Contact us if you wish. The controller for data processing is: Detrius Gmbh, Liviastraße 2, 04105 Leipzig Germany, 015252172404, info@detrius.com

Customer Initiated Contact by Email
If you initiate business contact with us by email, we only collect your personal data (name, email address, message text) to the extent provided by you. Data processing serves to process and answer your contact request.
If the contact serves to carry out pre-contractual measures (e.g., consultation for purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer Account Orders

Customer Account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until withdrawal. Your customer account will then be deleted.

Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.

Inventory Management

Use of an External Inventory Management System
We use an inventory management system for contract processing within the framework of order processing. For this purpose, your personal data collected during the order is transmitted to
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven
.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Payment Service Provider

Use of PayPal
We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering various payment methods tailored to customer needs. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. For more information on data processing when using the PayPal Express payment service, please refer to the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

Cookies may be stored here, which enable the recognition of your browser. The data processing taking place as a result is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.

Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal 
For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematically-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematically-statistical procedures, which include, among other things, address data in their calculation. Your legitimate interests are taken into account in accordance with legal provisions. Data processing serves the purpose of creditworthiness checks for initiating a contract. Processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in protecting against payment defaults when PayPal makes advance payments. 
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with your desired payment method. Failure to provide the data means that the contract cannot be concluded with the payment method you have chosen.

Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 para. 1 lit. b GDPR. To carry out this payment method, the data may then be forwarded by PayPal to the respective provider. This processing is based on Art. 6 para. 1 lit. b GDPR. Local third-party providers can be, for example:

• Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
• Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Invoice purchase via PayPal 
When paying via invoice purchase, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Ratepay may carry out a credit assessment based on mathematically-statistical procedures (probability or score values) using credit agencies as described above. Data processing serves the purpose of creditworthiness checks for initiating a contract. Processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in protecting against payment defaults when Ratepay makes advance payments. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/. 

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.


Analysis      Advertising tracking      


Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
Data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website use and internet use to the website operator. 
The following information, among others, may be collected: IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (website from which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data that Google has about you.

Your IP address will first be shortened by us on our own servers. Google thus receives only pseudonymized data.

Google uses technologies such as cookies, browser web storage and tracking pixels, which enable an analysis of your use of the website. The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. 

The processing of your personal data takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

The information generated by this about your use of this website is usually transmitted to a Google server in the USA and stored there. For the USA, an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place. Google has certified itself under the TADPF and has thus committed to adhering to European data protection principles. Both Google and US government authorities have access to your data.

For more information on terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.

Use of Shopify Statistics
On our website, we use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") as part of a data processing agreement. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. The following device information, among others, is collected and processed: information about the web browser, the IP address, the time zone, and some of the cookies installed on your device. When you navigate the website, information about visited web pages or products, the referrer URL (website from which you accessed our website), and information about how you interact with the website are also collected. For this purpose, technologies such as cookies, as well as web beacons, tags, and pixels (electronic files for collecting information about how you navigate the website) are used.
Your data may be transmitted to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place. Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
You can find more information on data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa and information on the cookies used at https://www.shopify.com/de/legal/cookies.


Use of Google AdSense
We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. Data processing serves the purpose of renting out advertising space on the website and targeting website visitors with interest-based advertising. This function allows personalized, interest-based advertising from the Google Display Network to be displayed to visitors of the provider's website. Google uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), exists for the USA. Google has certified under the TADPF and thus committed to complying with European data protection principles. Google may transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will under no circumstances link your IP address with other Google data.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent until withdrawal.
Further information and Google's privacy policy can be found at: https://www.google.com/policies/technologies/ads/ , https://www.google.de/policies/privacy/ and https://business.safety.google/privacy/

Use of Microsoft Advertising
We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft“) on our website.
Data processing serves marketing and advertising purposes and the purpose of measuring the success of advertising campaigns (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, personal identification of these users is not possible. Microsoft Advertising uses technologies such as cookies and pixel tags, which enable an analysis of your use of the website. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity and does not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to this page. The following information, among others, can be collected: IP address, identifiers (markers) assigned by Microsoft, information about the browser you are using and the device you are using, referrer URL (website from which you accessed our website), URL of our website.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent until withdrawal.
Further information on data protection and the cookies used by Microsoft can be found here.

Use of the Pinterest Tag
We use the Pinterest Tag from Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.
The application serves the purpose of specifically targeting website visitors with interest-based advertising on the social network Pinterest. For this purpose, the Pinterest conversion tag has been implemented on the website. Through this tag, a direct connection to the Pinterest servers is established when the website is visited. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, personalized, interest-based Pinterest ads will then be displayed to you.
If you access our website via a pin on the social network Pinterest, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain personal data, and thus do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page. The information obtained with the help of the conversion cookie serves the purpose of generating conversion statistics and thus optimizing our website. The following information, among others, can be processed: total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (e.g., category or product pages), search queries on our website, your shopping cart contents, completed transactions.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. Data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent until withdrawal.
Further information on the collection and use of data by Pinterest, on your rights in this regard and options for protecting your privacy can be found in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.
Use of TikTok Pixel
We use the TikTok Pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”) on our website. Both companies are joint controllers for data processing (hereinafter “TikTok”).
Data processing serves the purpose of identifying and analyzing website access by our customers and improving customer engagement by displaying targeted ads and evaluating the effectiveness of ads on TikTok. To this end, TikTok uses technologies such as cookies and pixels that enable your browser to be recognized. Among other things, the following information can be collected and transmitted to TikTok: date and time of visit, information about the browser and device type you are using, screen resolution, IP address. TikTok can associate this information with your personal TikTok user account. User profiles can be created from the data collected in this way using pseudonyms. However, personal identification of users is not possible.
Your data may be transferred to third countries, such as the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. Data transfer to the USA and to third countries without an adequacy decision takes place, among other things, on the basis of standard contractual clauses as suitable safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent until withdrawal.
Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.


Plug-ins and Other

Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website as part of commissioned data processing. The query serves the purpose of distinguishing between input by a human and automated, machine processing. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and, if applicable, other data required by Google for the reCAPTCHA service are transferred to Google. This data is processed by Google within the European Union and, if applicable, also transmitted to Google LLC servers in the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), exists for the USA. Google has certified under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent until withdrawal.

Data Subject Rights and Storage Period

Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
Subject to the legal requirements, you have the following rights under Art. 15 to 20 GDPR: the right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) (f) GDPR, as well as to processing for the purpose of direct marketing.

Right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among other places, with the supervisory authority responsible for us, which you can reach at the following contact details:

Saxon Commissioner for Data Protection and Transparency
Maternistraße 17
01067 Dresden
Tel.: +49 351 85471101
Fax: +49 351 85471109
E-mail: post@sdtb.sachsen.de

Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
After an objection has been lodged, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.