Privacy policy

PRIVACY POLICY AND COOKIE POLICY



1. **INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER**



1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when using our website. Personal data is any data that identifies you personally.



1.2 Controller of data processing on this website within the meaning of the General Data Protection Regulation (AVG) is You and Me Agency. The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.



1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the string “https://” and the lock icon in your browser bar.



2. **DATA COLLECTION WHEN VISITING OUR WEBSITE**



With purely informative use of our website, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary to display the website to you:



- The website you visited

- Date and time of access

- Amount of data sent in bytes

- Source/reference from where you came to the page

- Browser used

- Operating system used

- IP address used (if applicable: anonymized)



The processing occurs according to Article 6, paragraph 1, lit. f AVG based on our legitimate interest in improving the stability and functionality of our website. The data will not be transferred or otherwise used. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.


3. **COOKIES**



To make your visit to our website attractive and enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies used by us are deleted after the end of your browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information on an individual basis, such as browser and location data, as well as IP address values. Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the type of cookie.



Some cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data are also processed by individual cookies that we implement, the processing occurs according to Art. 6 (1) lit. b AVG, either for the performance of the contract or according to Art. 6 (1) lit. f AVG to protect our legitimate interests in the best possible functionality of the website, as well as a customer-friendly and effective design of the website visit.



We may cooperate with advertising partners who help us to make our Internet offer more interesting for you. To do this, in this case cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with previously mentioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in the following sections.



Please note that you can set your browser to inform you about the setting of cookies and decide individually on their acceptance, or to exclude the acceptance of cookies for certain cases or in general.

Each browser differs in how it manages cookie settings. This is described in each browser's help menu, which explains how to change your cookie settings. You can find these for the respective browsers at the following links:



Internet Explorer: [https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies](https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies)



Firefox: [https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen](https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen)



Chrome: [https://support.google.com/chrome/answer/95647?hl=de&hlrm=en](https://support.google.com/chrome/answer/95647?hl=de&hlrm=en)



Safari: [https://support.apple.com/kb/ph21411?locale=de_DE](https://support.apple.com/kb/ph21411?locale=de_DE)

Opera: [https://help.opera.com/en/latest/web-preferences/#cookies](https://help.opera.com/en/latest/web-preferences/#cookies)

Please note that if you do not accept cookies, the functionality of our website may be limited.




4. **CONTACTING US**



Personal data is collected when contacting us (for example, via the contact form or by e-mail). What data is collected in the case of a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the corresponding technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6, paragraph 1, lit. f AVG. If your contact with us is aimed at the conclusion of a contract, the additional legal basis for processing is Article 6 (1) lit. b AVG. Your data will be deleted after the final settlement of your request, this is the case when the circumstances show that the matter in question has been finally resolved and no legal retention periods prevent it.

 

5. **DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT FULFILLMENT**



In accordance with Article 6, paragraph 1, lit. b AVG, personal data are still collected and processed when you provide them to us in order to execute a contract or open a customer account. Which data is collected is shown in the respective input fields. You can delete your customer account at any time by sending a message to the above address of the controller. We store and use the data provided by you for processing the agreement. After full completion of the contract or deletion of your customer account, your data will be blocked for the purposes of tax and commercial law retention periods and deleted after the expiration of these periods, unless you have expressly consented to further use of your data or we reserve the right to further use your data in a legally permissible manner, about which we will inform you in more detail below.



6. **USE OF YOUR DATA FOR DIRECT MARKETING**



6.1 Registration for our email newsletter.
When you sign up for our email newsletter, we regularly send you information about our offers. Providing your e-mail address is the only mandatory information for sending the newsletter. Providing any other information is voluntary and is used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will send you an e-mail newsletter only after you have explicitly confirmed that you agree to receive the newsletter. We will then send you a confirmation e-mail asking you to click through on a corresponding link to confirm that you want to receive future newsletters.



By activating the confirmation link, you consent to our use of your personal data in accordance with Article 6(1), lit. a AVG. When registering for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of the registration in order to trace possible misuse of your e-mail address at a later date. The data we collect when you sign up for the newsletter is used exclusively for advertising purposes through the newsletter.

You can unsubscribe from the newsletter at any time using the appropriate link in the newsletter or by sending a message to the person responsible as mentioned above. After unsubscribing, your email address is immediately removed from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to further use your data in a legally permissible manner, about which we inform you in this statement.



6.2 Sending email newsletters to existing customers.



If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range by e-mail. No separate consent is required for this. Data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing in accordance with Article 6(1), lit. f AVG. If you have initially objected to the use of your e-mail address for this purpose, we will not send e-mails to you. You have the right to object at any time to the use of your e-mail address for the above-mentioned advertising purposes by sending a message to the responsible party as mentioned above. For you, only the costs for sending according to the basic rates will apply. Upon receipt of your objection, the use of your e-mail address for advertising purposes will immediately cease.


7. **DATA PROCESSING FOR ORDER PROCESSING**



7.1 Your payment data will be transmitted to the relevant banking institution as part of payment processing, to the extent necessary for payment processing. If payment service providers are used, we explicitly inform about this below. The legal basis for the data transfer is Article 6 (1) lit. b AVG.



7.2 Use of payment service providers (payment service providers).



Shopify Pay

When you use Shopify Pay, we and Shopify may collect and process the following data:



Personal Identification Data: such as your name, email address, billing and shipping address.

Payment Data: such as credit card or bank account information.

Transaction Data: details about your purchases and preferences.



The data collected is used for the following purposes:



Processing Transactions: To process your payments securely and efficiently.

Shipping of Orders: To ensure correct and timely delivery of your products.

Customer Service: To support you with any questions or problems with your order.

Fraud Prevention: To protect our customers and ourselves from fraud and other harmful activities.



Data Sharing:

We only share your personal data with third parties under the following circumstances:



With Shopify: To process payments through Shopify Pay.

With Service Providers: Who help us perform our business activities (e.g. payments).

Legal Requirements: If we are required by law to share your data.



The transfer takes place according to Article 6, paragraph 1, lit. b AVG and only to the extent necessary for payment processing.



Security of Data:

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, loss or misuse. Shopify Pay uses advanced security technologies to protect your payment information.



PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - “Buy on account” or “Pay by instalments” via PayPal, we transfer your payment information to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). The transfer takes place in accordance with Article 6 (1) lit. b AVG and only to the extent necessary for payment processing. PayPal reserves the performance of a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - “Purchase on account” or “Payment by instalments” via PayPal. For this purpose, your payment data are transferred to credit rating agencies if necessary based on PayPal's legitimate interest in establishing your creditworthiness in accordance with Article 6(1) lit. f AVG. PayPal uses the result of the creditworthiness check with respect to the statistical probability of default to decide on offering the respective payment method. The creditworthiness check may include probability values (so-called score values). To the extent that score values are included in the outcome of the creditworthiness check, they have their basis in a scientifically recognized mathematical-statistical method. Address data affects, among other things, but not exclusively, the calculation of score values. For further information on data protection, including the credit rating agencies used, please refer to PayPal's privacy policy: [https://www.paypal.com/de/webapps/mpp/ua/privacy-full](https://www.paypal.com/de/webapps/mpp/ua/privacy-full). You may object to the processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data to the extent necessary for the contractual processing of payments.



SOFORT

If you choose the payment method “SOFORT”, payment processing is handled by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we transfer your information provided during the ordering process, as well as the information about your order in accordance with Article 6 (1) lit. b AVG. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will be passed on to the payment service provider SOFORT only for payment processing and only to the extent necessary. For more information on SOFORT's privacy policy, please visit: [https://www.klarna.com/sofort/datenschutz](https://www.klarna.com/sofort/datenschutz).

 

8. **CONTACT FOR REVIEW REMINDER**



Own reminder of review (not sent by customer review system). We use your e-mail address to remind you once to provide a review of your order for the review system we use, provided you have given us your express consent to this during or after your order according to Art. 6 Abs. 1 lit. a AVG. You may revoke your consent at any time by sending a message to the data controller.



9. **USE OF SOCIAL MEDIA: SOCIAL PLUGINS**



9.1 Facebook plugins with Shariff solution**



Additional import duties and/or import taxes are not included in the price and shall be borne by the customer.



Our website uses so-called Social Plugins (“Plugins”) of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).



To increase the protection of your data during your visit to our website, these buttons are not displayed indefinitely as plugins, but only embedded on the page via an HTML link. This form of integration ensures that when you open a page of our website that contains such buttons, no connection to Facebook's servers is yet established. When you click the button, a new browser window is opened and the Facebook page is loaded where you can interact (possibly after entering your login data) with the plugins present there.



Facebook Inc. headquartered in the US is certified for the EU-US Privacy Shield, which ensures compliance with the level of privacy protection in the EU.



The purpose and scope of data collection and further processing and use of the data by Facebook, as well as your corresponding rights and setting options to protect your privacy, can be found in Facebook's privacy policy: [https://www.facebook.com/policy.php](https://www.facebook.com/policy.php)


9.2 Google+ -Plugins as a Shariff Solution



On our website we use so-called Social Plugins (“Plugins”) from the social network Google+, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).



To increase the protection of your data during your visit to our website, these buttons are not displayed indefinitely as plugins, but only embedded on the page via an HTML link. This form of integration ensures that when you open a page of our website that contains such buttons, no connection to the servers of Google+ is yet established. When you click the button, a new browser window is opened and the page of Google+ is loaded where you can interact (possibly after entering your login data) with the plugins present there.



Google LLC headquartered in the US is certified for the EU-US Privacy Shield, which ensures compliance with the level of privacy protection in the EU.



For the purpose and scope of data collection and further processing and use of the data by Google, as well as your rights and setting options to protect your privacy, we would like to refer you to Google's privacy statement: [https://www.google.com/intl/de/policies/privacy/](https://www.google.com/intl/de/policies/privacy/)



9.3 Instagram Plugin as Shariff Solution

Our website uses so-called social plugins (“plugins”) of the online service Instagram, operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).



In order to increase the protection of your data during your visit to our website, these buttons are not integrated directly as plugins, but only included in the page via an HTML link. This integration ensures that when calling up a page on our website that contains such buttons, a connection to Instagram's servers is not yet established. When you click the button, a new browser window opens and the page of Instagram opens, where you can interact (possibly after entering your login data) with the plugins present there.



Instagram LLC. based in the US is certified for the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.



The purpose and scope of data collection and further processing and use of the data by Instagram, as well as your corresponding rights and setting options to protect your privacy, can be found in the privacy policy of



Instagram: [https://help.instagram.com/155833707900388/](https://help.instagram.com/155833707900388/).


10. **Online Marketing**



10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).



DoubleClick uses cookies to serve relevant ads to users, improve campaign performance reports or prevent a user from seeing the same ad multiple times. Google records which ads are displayed in which browser via a cookie ID and can thus prevent them from being displayed multiple times. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) point f AVG.



In addition, DoubleClick can record conversions related to ad requests via cookie IDs. This happens, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and purchases something there. According to Google, DoubleClick cookies do not contain any personal information.



Because of the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you on the basis of our knowledge: through the integration of DoubleClick, Google receives the information that you have visited the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can link your visit to your account. Even if you are not registered with Google or not logged in, there is a possibility that the provider will find out and store your IP address.



If you wish to object to participating in this tracking process, you can disable conversion tracking cookies by setting your browser to block cookies from the www.googleadservices.com domain at [https://www.google.de/settings/ads](https://www.google.de/settings/ads), with this setting being removed when you delete your cookies. You can also learn about cookie setting and make settings through the Digital Advertising Alliance at [www.aboutads.info](http://www.aboutads.info). Finally, you can set your browser to inform you about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies in certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.



Google LLC, based in the USA, is certified for the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.



For more information on the privacy provisions of DoubleClick by Google, please visit the following Internet page: [https://www.google.de/policies/privacy/](https://www.google.de/policies/privacy/).



10.2 Use of Google AdWords Conversion-Tracking.

This website uses the online advertising program “Google AdWords” and within Google AdWords conversion-tracking by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to point out our attractive offers on external websites using advertising tools (so-called Google AdWords). We can determine in relation to the data from the advertising campaigns how successful the individual advertising measures are. With this, we want to show you ads that are of interest to you, make our website more interesting for you and achieve a fair calculation of advertising costs.

 

The conversion tracking cookie is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. Thus, cookies cannot be tracked through the websites of AdWords customers. The information obtained from the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers know the total number of users who clicked on their ad and were redirected to a page provided with a conversion tag. However, they do not receive information that identifies users personally. If you do not want to participate in the tracking process, you can block this feature by disabling the Google Conversion-Tracking cookie through your Internet browser under user settings. You will then not be included in the conversion statistics. We use Google AdWords on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 (1) f AVG.



Google LLC, based in the USA, is certified for the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.



For more information about Google's privacy provisions, please visit the following internet page: [https://www.google.de/policies/privacy/](https://www.google.de/policies/privacy/).



You can permanently disable cookies for advertising preferences by blocking them via a corresponding setting in your browser software or by downloading and installing the browser plug-in from the following link: [https://www.google.com/settings/ads/plugin?hl=de](https://www.google.com/settings/ads/plugin?hl=de).



Please note that certain functions of this website may not be able to be used or may be limited if you have disabled the use of cookies.

 

11. **Web analytics services**



Google (Universal) Analytics



Google Universal Analytics



This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including your abbreviated IP address) is usually transferred to a Google server in the USA and stored there.



This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which anonymizes the IP address by shortening it and thus excludes direct traceability to individuals. With this extension, your IP address is first shortened by Google within member states of the European Union or in other contracting states of the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In these exceptional cases, this processing takes place on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6 para. 1 point f AVG.



On our behalf, Google will use this information to evaluate your use of the website, compiling reports on website activity and providing other services to us relating to the use of the website and the Internet. The IP address sent by your browser within the scope of Google Analytics will not be merged with other Google data.



You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent the data generated by the cookie relating to your use of the website (including your IP address) from being transmitted to and processed by Google by downloading and installing the browser plugin available at the following link: [https://tools.google.com/dlpage/gaoptout?hl=nl](https://tools.google.com/dlpage/gaoptout?hl=nl).



As an alternative to the browser plugin or within browsers on mobile devices, click on the following link to set an opt-out cookie that prevents future collection of your data by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again): Deactivate Google Analytics



Google LLC, based in the US, is certified under the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.



This website also uses Google Analytics for cross-device analysis of visitor flows, which is performed via a user ID. Upon the first visit to a page, the user is assigned a unique, permanent and anonymized ID, which is set cross-device. This makes it possible to assign interaction data from different devices and from different sessions to a single user. The user ID does not contain any personal data nor does it send such data to Google.



The collection and storage of data via the user ID can be revoked at any time with effect for the future. To do so, you must deactivate Google Analytics on all systems you use, for example in another browser or on your mobile device.



You can perform the deactivation using a browser plugin from Google (https://tools.google.com/dlpage/gaoptout?hl=nl). As an alternative to the browser plugin or within browsers on mobile devices, click on the following link to set an opt-out cookie that prevents future collection of your data by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again): Deactivate Google Analytics



More information about Universal Analytics can be found here: [https://support.google.com/analytics/answer/2838718?hl=nl&ref_topic=6010376](https://support.google.com/analytics/answer/2838718?hl=nl&ref_topic=6010376).

 

12. **Retargeting/Remarketing/Advertising based on recommendations**



Facebook Custom Audience using the Pixel method.

This website uses the “Facebook pixel” of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). With your explicit consent, this allows tracking the behavior of users after they have seen or clicked on a Facebook ad. This process serves to evaluate the effectiveness of Facebook ads for statistical and market research purposes and may help optimize future ad campaigns.



The data collected is anonymous to us, meaning we cannot draw any conclusions about the identity of users. However, Facebook stores and processes the data so that a connection can be made to the respective user profile. Facebook may use this data for its own advertising purposes, in accordance with Facebook's data policy (https://www.facebook.com/about/privacy/). This allows Facebook and its partners to display advertisements on and off Facebook. For these purposes, a cookie may be stored on your computer. These processing operations only take place with your express consent according to Art. 6 (1) point a AVG.



A consent for the use of the Facebook pixel may only be given by users over 13 years of age. If you are younger, we ask for your parents' or guardian's consent.



Facebook Inc., based in the US, is certified under the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.



To deactivate the use of cookies on your computer, you can set your Internet browser to not store cookies on your computer in the future or to delete cookies already stored. However, deactivating all cookies may cause some functions on our Internet pages to no longer perform correctly. You can also disable cookies being used by third parties, such as Facebook, on the following Digital Advertising Alliance website: https://www.aboutads.info/choices/



Google AdWords Remarketing



Our website uses Google AdWords Remarketing features. With this, we advertise this website in Google search results and on third-party websites. Provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising based on the pages you visit. The processing takes place on the basis of our legitimate interest in the optimal marketing of our website according to Art. 6 para. 1 point f AVG.



Further data processing only takes place if you have given Google permission to link your internet and app browsing history to your Google account and to use information from your Google account to personalize ads you see on the web. In that case, if you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define targeting lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups.



You can permanently disable cookies for advertising preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/



Alternatively, you can inform yourself about setting cookies at the Digital Advertising Alliance under the Internet address www.aboutads.info and make the necessary settings here. Finally, you can set your browser to notify you of the placement of cookies and decide individually whether to accept them or exclude the acceptance of cookies in certain cases or in general. Not accepting cookies may limit the functionality of our website.



Google LLC, based in the USA, is certified under the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.



More information and Google's privacy policy regarding ads can be found here: https://www.google.com/policies/technologies/ads/

 

13. **Rights of the Data Subject**



13.1 Overview of the Data Subject's Rights.



The applicable privacy law grants you extensive rights regarding the processing of your personal data by the controller. Below we inform you about these rights:



- **Right to Information (Art. 15 AVG): **You have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if it has not been collected by us from you, the existence of automated decision-making including profiling, and if applicable, meaningful information on the logic involved and the consequences and intended effects of such processing, as well as your right to be informed about the safeguards that according to Art. 46 AVG exist when transferring your data to third countries.



- **Right of Correction (Art. 16 AVG):** You have the right to immediate correction of incorrect data concerning yourself and/or completion of incomplete data stored by us.



- **Right to Deletion (Art. 17 AVG):** You have the right to request the deletion of your personal data if one of the conditions of Art. 17 paragraph 1 AVG applies. However, this right does not exist if the processing is necessary for exercising the right to freedom of expression and information, for complying with a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims.



- **Right to Restriction of Processing (Art. 18 AVG):** You have the right to request the restriction of the processing of your personal data, as long as the accuracy of your data is disputed by you, if you reject the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the assertion, exercise or defense of legal claims after we no longer need this data for the purposes of processing, or if you have objected to the processing on the grounds of your particular situation, as long as it has not yet been established whether our legitimate grounds outweigh the processing.



- **Right to Information (Art. 19 AVG):** If you have exercised the right to correction, deletion or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data in question have been provided of this correction or deletion of the data or restriction of processing, unless this proves impossible or requires disproportionate effort. You have the right to be informed about these recipients.



- **Right to Data Portability (Art. 20 AVG):** You have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request its transfer to another controller, insofar as this is technically possible.



- **Right to Withdrawal of Given Consent (Art. 7 para. 3 AVG):** You have the right to withdraw a consent to data processing once given at any time with effect for the future. In the event of revocation, we will delete the relevant data immediately, unless further processing can be based on a legal ground for processing without consent. The lawfulness of the processing on the basis of consent up to the time of revocation remains unaffected by this.



- **Right to Complaint (Art. 77 AVG):** If you believe that the processing of your personal data is in violation of the AVG, you have the right - without prejudice to other administrative or judicial remedies - to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged breach.

 

13.2 Right of Objection



If we process your personal data based on a balancing of interests due to our overwhelming legitimate interest, you have the right to object to this processing with effect for the future at any time on grounds arising from your specific situation.



If you exercise your right to object, we will cease processing the data in question. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.



If your personal data are processed by us for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. You may exercise your objection as described above.



If you exercise your right to object, we will cease processing the relevant data for direct advertising purposes.

14. **Duration of Storage of Personal Data**.

The duration of the storage of personal data is determined by the respective statutory retention period (e.g. commercial and tax law retention periods). After the expiration of this period, the relevant data will be routinely deleted, provided that they are no longer necessary for the performance of a contract or the conclusion of a contract and/or there is no longer a legitimate interest on our part to store this data.



15. Contact information

If you have any questions about this privacy statement or your personal data, please contact us:

Email: info@youandmeagency.nl

For more information on how Shopify processes your data, please see their privacy policy at: https://www.shopify.com/nl/juridisch/privacy