Privacy Policy

Privacy Policy - General As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that provides information about you and can be used to identify you. In this Privacy Policy, we would like to explain how, for what purpose, and on what legal basis we process your data. The entity responsible for data processing on this website and within our company is: Grimm & Winkelmann GbR - TEMPL8 Brennerstraße 89, 13187 Berlin, Germany Phone: 0151 56058658 Email: templ8.store@gmail.com General Information SSL or TLS Encryption When you enter your data on websites, place online orders, or send emails over the Internet, you must always be aware that unauthorized third parties may access your data. There is no such thing as complete protection against such access. However, we do everything in our power to protect your data as best as possible and to close any security gaps to the extent that we are able. An important protective measure is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the padlock icon next to the website address in your browser and by the fact that our website address begins with https:// rather than http://. Encrypted Payment Transactions Payment data, such as account or credit card numbers, requires special protection. That is why all payment transactions using standard payment methods are processed exclusively via an encrypted SSL or TLS connection. How long do we store your data? In certain sections of this Privacy Policy, we inform you about how long we—or the companies that process your data on our behalf—store your data. If no such information is provided, we will store your data until the purpose of the data processing no longer applies, you object to the data processing, or you withdraw your consent to the data processing. In the event of an objection or Right of Withdrawal, however, we may continue to process your data if at least one of the following conditions is met: We have compelling legitimate grounds for continuing data processing that override your interests, rights, and freedoms (only in the case of an objection to data processing; if the objection is directed against direct marketing, we cannot invoke any legitimate grounds). Data processing is necessary to assert, exercise, or defend legal claims (this does not apply if your objection is directed against direct marketing). We are legally obligated to retain your data. In this case, we will delete your data as soon as the applicable condition(s) no longer apply. Data Transfer to the U.S. We also use tools on our website from companies that transfer your data to the U.S., where it is stored and, if necessary, further processed. The European Commission has adopted an adequacy decision regarding the EU-U.S. data protection framework. This decision establishes that the U.S. ensures an adequate level of protection for personal data from the EU that is transferred to U.S. companies. This decision is based on new safeguards and measures introduced by the U.S. to meet data protection requirements. Among other things, the adequacy decision includes restrictions and safeguards regarding access to the data by U.S. intelligence agencies. Binding safeguards have been introduced to limit access by U.S. intelligence agencies to what is necessary and proportionate for the protection of national security. In addition, enhanced oversight of the activities of U.S. intelligence agencies has been established to ensure that restrictions on surveillance activities are adhered to. An independent recourse mechanism has also been established to address and resolve complaints from European citizens regarding access to their data. The EU-U.S. Privacy Shield thus enables European companies to transfer data to certified U.S. companies without having to implement additional data protection safeguards. You can view a list of all certified companies at the following link: https://www.dataprivacyframework.gov/s/participant-search A change to the European Commission’s decision cannot be ruled out. Your Rights: Objection to Data Processing IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE BASED ON ART. 6(1), first sentence, subparagraph (f) of the GDPR, YOU HAVE THE RIGHT UNDER ART. 21 OF THE GDPR TO OBJECT TO SUCH PROCESSING. THIS ALSO APPLIES TO PROFILING CONDUCTED ON THE BASIS OF THE AFOREMENTIONED PROVISION. THE PREREQUISITE IS THAT YOU PROVIDE REASONS FOR YOUR OBJECTION THAT ARISE FROM YOUR SPECIFIC SITUATION. A JUSTIFICATION IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING. THE RESULT OF YOUR OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY ONLY IF ONE OF THE FOLLOWING CONDITIONS IS MET: WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS. THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS. THESE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING which is related to this. Additional Rights: Right of Withdrawal of Your Consent to Data Processing Many data processing operations are based on your consent. You provide this consent, for example, by checking the appropriate box on online forms before submitting them, or by accepting certain cookies when you visit our website. You have the right of withdrawal at any time without providing a reason (Art. 7(3) GDPR). From the time of withdrawal, we may no longer process your data. The only exception: We are legally required to retain the data for a certain period of time. Such retention periods exist, in particular, under tax and commercial law. Right to File a Complaint with the Competent Supervisory Authority If you believe that we are in violation of the General Data Protection Regulation (GDPR), you have the right under Article 77 of the GDPR to file a complaint with a supervisory authority. You may contact a supervisory authority in the Member State where you reside, where you work, or where the alleged violation occurred. The right to lodge a complaint exists in addition to administrative or judicial remedies. Right to Data Portability We must provide you or a third party with data that we process automatically based on your consent or in fulfillment of a contract in a commonly used machine-readable format if you request it. We may only transfer the data to another controller to the extent that this is technically feasible. Right to Access, Erasure, and Rectification of Data Under Article 15 of the GDPR, you have the right to obtain, free of charge, information about which of your personal data we have stored, where the data comes from, to whom we transfer the data, and for what purpose it is stored. If the data is incorrect, you have the right to have it rectified (Article 16 of the GDPR); under the conditions set forth in Article 17 of the GDPR, you may request that we erase the data. Right to Restriction of Processing In certain situations, you may request that we restrict the processing of your data pursuant to Article 18 of the GDPR. In such cases, the data may then—apart from storage—only be processed as follows: with your consent; to assert, exercise, or defend legal claims; to protect the rights of another natural or legal person; or for reasons of an important public interest of the European Union or a Member State. The right to restriction of processing applies in the following situations: You have contested the accuracy of your personal data stored by us, and we need time to verify this. In this case, the right applies for the duration of the verification. The processing of your personal data is unjustified or was unlawful in the past. In this case, the right applies as an alternative to erasure of the data. We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. In this case, you have the right to restrict processing as an alternative to erasure. You have lodged an objection pursuant to Article 21(1) of the GDPR, and your interests and ours must now be balanced against one another. In this case, the right applies until the outcome of the balancing test is determined. Hosting and Content Delivery Networks (CDN) External Hosting Our website is hosted on a server provided by the following internet service provider (host): VERCEL 340 S Lemon Ave Walnut, CA 91789 How do we process your data? The host stores all data from our website. This includes all personal data collected automatically or through your input. In particular, this may include: your IP address, pages visited, names, contact information and inquiries, as well as metadata and communication data. When processing data, our hosting provider follows our instructions and processes the data only to the extent necessary to fulfill its contractual obligations to us. On what legal basis do we process your data? Since we use our website to reach potential customers and maintain Contact with existing customers, the data processing carried out by our hosting provider serves the purposes of contract initiation and fulfillment and is therefore based on Article 6(1)(b) of the GDPR. Furthermore, it is in our legitimate interest as a company to provide a professional website that meets the necessary requirements for security, speed, and efficiency. To this extent, we also process your data on the basis of Article 6(1)(f) of the GDPR. Data Collection on This Website: Use of Cookies Our website places cookies on your device. These are small text files used for various purposes. Some cookies are technically necessary for the website to function at all (essential cookies). Others are required to perform certain actions or functions on the site (functional cookies). For example, without cookies, it would not be possible to use the features of a shopping cart in an online store. Still other cookies are used to analyze user behavior or optimize advertising. If we use third-party services on our website—for example, to process payments—these companies may also place cookies on your device when you visit the website (so-called third-party cookies). How do we process your data? Session cookies are stored on your device only for the duration of a session. As soon as you close your browser, they are automatically deleted. Persistent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, result in your user behavior being analyzed on an ongoing basis. You can use your browser’s settings to control how it handles cookies: Do you want to be notified when cookies are set? Do you want to block cookies in general or in specific cases? Do you want cookies to be automatically deleted when you close your browser? If you disable or do not allow cookies, the functionality of the website may be limited. If we use cookies from other companies or for analytical purposes, we will inform you of this in this Privacy Policy. We also request your consent in this regard when you visit our website. On what legal basis do we process your data? We have a legitimate interest in ensuring that visitors can use our online services without technical issues and that all desired features are available to them. The storage of necessary and functional cookies on your device is therefore based on Article 6(1)(f) of the GDPR. We use all other cookies based on Article 6(1)(a) of the GDPR, provided that you give us your consent. You have the right of withdrawal with future effect for all consented placements of necessary and functional cookies. If you consented to the placement of these cookies when prompted, the storage of these cookies is also based exclusively on your consent. Server Log Files Server log files record all requests and accesses to our website and log error messages. They also contain personal data, in particular your IP address. However, this is anonymized by the provider after a short period of time, so that we cannot associate the data with you personally. The data is automatically transmitted from your browser to our provider. How do we process your data? Our provider stores the server log files to track activity on our website and identify errors. The files contain the following data: Browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, IP address (anonymized if applicable). We do not combine this data with any other data; rather, we use it solely for statistical analysis and to improve our website. On what legal basis do we process your data? We have a legitimate interest in ensuring that our website runs without errors. It is also in our legitimate interest to obtain an anonymized overview of visits to our website. Data processing is therefore lawful pursuant to Art. 6(1)(f) of the GDPR. Analytics Tools and Advertising We use the following tools to analyze the behavior of our website visitors and to show you advertisements. Microsoft Clarity What is Microsoft Clarity? A tool from Microsoft Corp. for analyzing user behavior. Who processes your data? Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Has a data processing agreement been concluded with Microsoft Clarity? Yes 1. Where can you find more information about the Microsoft Clarity Privacy Policy? https://privacy.microsoft.com/de-de/privacystatement On what basis do we transfer your data to the U.S.? Based on the European Commission’s Adequacy Decision and the company’s corresponding certification. How do we process your data? We use Microsoft Clarity on our website. Clarity is a tool for analyzing user behavior. In particular, Clarity tracks mouse movements and creates a graphical representation of which parts of the website users scroll to most frequently (heat maps). Clarity can also record sessions, allowing us to view page usage in the form of videos. Furthermore, we receive information about general user behavior on our website. Clarity uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Your personal data is stored on Microsoft’s servers (Microsoft Azure Cloud Service) in the United States. On what legal basis do we process your data? As a website operator, we have a legitimate interest in optimizing our online offering and our advertising activities. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise given your consent to data processing, the sole legal basis is Article 6(1)(a) of the GDPR. You have the right of withdrawal at any time with future effect. YouTube (with enhanced Privacy Policy) What is YouTube? Video platform Who processes your data? Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland Where can you find more information about the YouTube Privacy Policy? https://www.youtube.com/intl/ALL_de/howyoutubeworks/our-commitments/protecting-user-data/? gclid=EAIaIQobChMIztKuysSW-gIVjgwGAB0euwPlEAAYASAAEgLBXfD_BwE How do we process your data? You can watch YouTube videos on our website. In doing so, Google, as the provider of YouTube, collects and stores certain information about you. However, since we use YouTube in enhanced privacy mode, this only happens once you start a video. Specifically, the following happens in this case: Google’s servers are notified which of our pages were visited from your device. If you are logged into your YouTube account while browsing, Google can directly associate your browsing behavior with your personal profile. If you do not want this to happen, you must log out of your YouTube account before continuing to browse the internet. Google obtains information about visitors to our website via cookies, device fingerprinting, or similar recognition technologies. Based on these basics, the company then compiles video statistics, makes its application more appealing to users, and prevents fraud attempts. In some cases, your data may also be processed beyond this scope. However, the details are beyond our knowledge. Nor can we influence this processing. Even if you do not play a YouTube video on our website, Google establishes a connection to its DoubleClick network and, if applicable, to other partners as well. The enhanced privacy mode therefore does not mean that Google does not process any of your data at all when you visit our website. On what legal basis do we process your data? By embedding YouTube videos, we aim to make our website, as well as our services and offerings, more appealing. This is our legitimate interest as a business and is therefore lawful under Article 6(1)(f) of the GDPR. If you have consented to the data processing, we process your data exclusively on the basis of Article 6(1)(a) of the GDPR. You may exercise your Right of Withdrawal at any time. From the time of withdrawal, we may no longer process your data. E-commerce and Payment Providers: Customer and Contract Data How do we process your data? When we enter into a contract with you, we need certain personal data from you. We collect, process, and use this data only to the extent necessary to establish, define the terms of, or modify our legal relationship. If you can only use our services through our website or if the services are billed via the website, we also collect usage data to the extent that it is necessary to enable you to use our services or to bill you for the services you’ve used. How long do we store your data? We store your data until our legal relationship ends, unless we are legally required to retain the data for a longer period. On what legal basis do we process your data? We store your data to fulfill the contract with you or to carry out pre-contractual measures. The legal basis for data processing is therefore Article 6(1)(b) of the GDPR. Data Transfer When Using Services and Digital Content How do we process your data? To process the payment, we transfer your data to a payment service provider or the financial institution responsible for payment processing. We only disclose data that is strictly necessary for the payment process. If we wish to disclose additional data, we will obtain your consent. On what legal basis do we process your data? We disclose your data to fulfill the contract we have concluded with you. The legal basis for data processing is therefore Article 6(1)(b) of the GDPR. If you have consented to the transfer of your data, the data processing is based on Article 6(1)(a) of the GDPR. You have the right of withdrawal at any time with future effect. Payment Services To enable you to conveniently pay for your purchases on our website, we use the services of payment service providers—that is, external companies that process payments on our behalf. You can find a list of these providers at the end of this section. How do we process your data? To complete the payment process, you must provide certain personal data, such as your name, bank account information, or credit card number. We share this data with the respective payment service provider. The transaction itself is governed by the respective terms and conditions and privacy policies of the relevant payment service providers. On what legal basis do we process your data? We share your data to fulfill the contract we have entered into with you. The legal basis for data processing is therefore Article 6(1)(b) of the GDPR. In addition, we have a legitimate interest in processing purchases as quickly, conveniently, and securely as possible. In this respect, the legal basis is also Article 6(1)(f) of the GDPR. If you have consented to the disclosure of your data, the data processing is based on Article 6(1)(a) of the GDPR. You have the right of withdrawal at any time with future effect. Which payment services do we use? PayPal What is PayPal? Online payment service Who processes your data? PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg Where can you find more information about the PayPal Privacy Policy? https://www.paypal.com/de/webapps/mpp/ua/privacy-full On what basis do we transfer your data to the U.S.? PayPal complies with the European Commission’s Standard Contractual Clauses (see https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full) Apple Pay What is Apple Pay? A mobile payment service provided by Apple Inc. Who processes your data? Apple Inc., Infinite Loop, Cupertino, CA 95014, USA Where can you find more information about the Apple Pay Privacy Policy? https://www.apple.com/legal/privacy/de-ww/ On what basis do we transfer your data to the U.S.? Apple Pay complies with the European Commission’s Standard Contractual Clauses (see https://www.apple.com/legal/privacy/de-ww/) Google Pay What is Google Pay? A mobile payment system provided by the U.S.-based company Google. Who processes your data? Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland Where can you find more information about data protection with Google Pay? https://policies.google.com/privacy On what basis do we transfer your data to the U.S.? Based on the European Commission’s adequacy decision and the company’s corresponding certification. Stripe What is Stripe? An online payment service. Who processes your data? Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Where can you find more information about the company’s Privacy Policy? https://stripe.com/de/privacy On what basis do we transfer your data to the U.S.? Based on the European Commission’s adequacy decision and the company’s corresponding certification. Klarna What is Klarna? Payment service provider Who processes your data? Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden Where can you find more information about the Klarna Privacy Policy? https://www.klarna.com/de/datenschutz/ Paydirekt What is Paydirekt? Online payment method offered by German banks and savings banks Who processes your data? Paydirekt GmbH, Stephanstraße 14, 60313 Frankfurt am Main, Germany Where can you find more information about the Privacy Policy at Paydirekt? https://www.paydirekt.de/agb/index.html Sofortüberweisung What is Sofortüberweisung? An online payment method that works like a bank transfer, but with a third-party company acting as an intermediary to confirm the payment to us as the seller. Who processes your data? Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany (Sofort GmbH is part of the Klarna Group) Where can you find more information about the Sofortüberweisung privacy policy? https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/ Data Processing on Social Media What is social media? By “social media,” we mean the social networks on which we have created publicly accessible profiles. You can find out exactly which social networks these are below. Who processes your data? The respective operators of the social networks. You can find the individual operators listed below under the respective networks. How is your data processed? Social media operators are generally able to collect and analyze comprehensive data on the behavior of visitors and users of the network. We are unable to track all data processing activities on the social media platforms we use; therefore, the operators of these platforms may carry out additional processing activities not listed here. You can find further information on this in the terms of use and privacy policies of the respective social networks. The processing of your data may be triggered when you visit the social network’s website or our profile page there. Even if you visit a website that uses certain elements of the social network—such as “Like” or “Share” buttons—data may already be transmitted to the social network operators. If you are a user of the social network and are logged into your user account, your visit to our profile page may be associated with your account by the social network operator. Even if you have not registered a user account yourself or are not logged in, the network operator may still collect your personal data—for example, by recording your IP address or setting cookies. With this data, the operators can create user profiles tailored to your behavior and interests and display interest-based advertising to you both within and outside the network. If you are a registered user of the network, interest-based advertising may also be displayed on all devices on which you are or have been logged in. On what legal basis is your data processed? Our social media profiles are intended to ensure the most comprehensive possible online presence for our company. As a company, we have a legitimate interest in this. The data processing is therefore lawful under Article 6(1)(f) of the GDPR. The data processing operations and analyses carried out by the social media platform operators themselves may be based on other legal grounds. These must be specified by the social media platform operators. Who is responsible for processing your data, and how can you exercise your rights? When you visit one of our profiles on social media, we are jointly responsible with the operator of the respective network for the data processing operations triggered by that visit. In principle, you can exercise your rights with both us and the operator of the respective network. However, despite our joint responsibility with the social media platform operators, our influence over the data processing activities of the respective operator is limited and is primarily governed by the operator’s guidelines. How long will your data be stored? When we collect data through our social media profiles, it is deleted from our systems as soon as the purpose for its storage no longer applies, you request that we delete it, or you exercise your right of withdrawal with regard to its storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions—in particular retention periods—remain unaffected. We have no influence over how long social media platform operators store the data they collect for their own purposes. You can obtain information on this directly from the operator of the respective social network, e.g., in its privacy policy. Which social media platforms do we use? Facebook What is Facebook? A social network Who processes your data? Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland Is your data transferred to third countries? Yes, to the U.S. and also to other third countries. Where can you find more information about the Facebook Privacy Policy? https://www.facebook.com/about/privacy/ Where can you, as a Facebook user, adjust your ad settings? As a registered Facebook user, you can adjust your ad settings in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads. Instagram What is Instagram? A social network specializing in photos and videos Who processes your data? Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland Is your data transferred to third countries? Yes Where can you find more information about the Instagram Privacy Policy? https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram Help Center&bc[1] =Policies%20and%20Notices Where can you, as a user, adjust your privacy settings? As a registered Instagram user, you can adjust your privacy settings in your user account. To do so, click the following link and log in: https://www.instagram.com/accounts/privacy_and_security/ LinkedIn What is LinkedIn? A social network for professional contacts Who processes your data? LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland Is your data transferred to third countries? Yes Where can you find more information about the LinkedIn Privacy Policy? https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy Where can you, as a user, adjust your Privacy Policy settings? As a registered LinkedIn user, you can adjust your Privacy Policy settings in your user account. To do so, click the following link and log in: https://www.linkedin.com/psettings/ YouTube What is YouTube? A social network in the form of an online video portal Who processes your data? Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Is your data transferred to third countries? Yes. Where can you find more information about the YouTube Privacy Policy? https://policies.google.com/privacy?hl=de. Where can you, as a user, adjust your privacy settings? https://policies.google.com/privacy?hl=de#infochoices. TikTok What is TikTok? A social network specializing in photos and videos Who processes your data? TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland Is your data transferred to third countries? Yes Where can you find more information about the TikTok Privacy Policy? https://www.tiktok.com/legal/tiktok-website-cookies-policy?lang=de Where can you, as a user, adjust your Privacy Policy settings? https://www.tiktok.com/legal/tiktok-website-cookies-policy?lang=de