The following declaration gives you an overview of how we guarantee this protection and what type of data is collected for what purpose.
General information about the processing of your data
We are legally obliged to inform you about the processing of your personal data (hereinafter “data”) when you use our website. We take the protection of your personal data very seriously. This data protection notice informs you about the details of the processing of your data as well as about your legal rights in this regard. For terms such as “personal data” or “processing”, the legal definitions from Art. 4 GDPR are authoritative. We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of the further development of the website, the use of new technologies or changes to the legal basis or the corresponding case law. We recommend that you read the data protection declaration from time to time and keep a printout or a copy for your records.
Scope
The data protection declaration applies to all pages of www.y2kfashionshop.com. It does not extend to any linked websites or internet presences from other providers.
Safety
We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external disturbances. To this end, we regularly review our security measures and adapt them to the state of the art.
Your rights
You have the following rights with regard to your personal data, which you can assert against us:
- Right to information: You can request information in accordance with Art. 15 GDPR about your personal data that we process.
- Right to correction: If the information concerning you is no longer correct, you can request a correction according to Art. 16 GDPR. If your data is incomplete, you can request it to be completed.
- Right to deletion: You can request the deletion of your personal data in accordance with Art. 17 GDPR.
- Right to restriction of processing: In accordance with Art. 18 GDPR, you have the right to request that your personal data be restricted.
- Right to object of processing: You have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 S. 1 lit. e) or lit. f) GDPR takes place, to object according to Art. 21 Para. 1 GDPR. In this case, we will not process your data further unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, and if the processing serves to assert and exercise or defend against legal claims (Art. 21 Paragraph 1 GDPR). In addition, according to Art. 21 Para. 2 GDPR, you have the right to object at any time to the processing of personal data concerning you for the purpose of direct advertising; this also applies to any profiling insofar as it is associated with such direct advertising. We draw your attention to the right of objection in this data protection declaration in connection with the respective processing.
- Right to revoke your consent: If you have given your consent to processing, you have a right of revocation according to Art. 7 Para. 3 GDPR.
- Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format (“data portability”) and the right to forward this data to another person responsible if the The prerequisite of Art. 20 Para. 1 lit. a, b GDPR are met (Art. 20 GDPR).
- You can assert your rights by notifying us to the contact details given in the section “Contact” or to the data protection officer appointed by us.
If you are of the opinion that the processing of your personal data violates data protection law, you also have the right, according to Art. 77 GDPR, to complain to a data protection supervisory authority of your choice.
Use of our website
In principle, you can use our website for purely informational purposes without disclosing your identity. When calling up the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. The following data are processed here:
- Browser type / browser version,
- operating system used,
- Language and version of the browser software,
- Date and time of access,
- Host name of the accessing device,
- IP address,
- Content of the request (specific website),
- Access status / HTTP status code,
- Websites that are accessed via the website,
- Referrer URL (the previously visited website),
- Message whether the call was successful and
- Amount of data transferred.
The temporary processing of this data is necessary to technically enable a website visit and delivery of the website to your device. Further storage in log files takes place in order to guarantee the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit.f) GDPR. Our legitimate interests lie in ensuring the functionality of the website and the integrity and security of the website. The storage of access data in log files, in particular the IP address, for a longer period enables us to recognize and prevent abuse. This includes, for example, the defense of requests that are overloaded with the service. The access data will be deleted as soon as they are no longer required to achieve the purpose for which they were processed. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website. The log data are stored directly and only accessible to administrators and are deleted after seven days at the latest. After that, they are only available indirectly via the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.
You can object to the processing. You have the right to object for reasons that arise from your particular situation. You can send us your objection using the contact details given in the section “Responsible provider”.
Tracking
In addition to the aforementioned access data, so-called cookies, pixels, browser fingerprinting or other tracking technologies are used when using the website. Cookies are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Pixels are one-pixel images that are intransparent or created in the background color of the website and are therefore not visible to the user. The pixel also collects information about your user behavior on the website. Fingerprinting technologies generate a unique fingerprint based on the browser settings and thus identify an individual browser. Using a script, which every Internet browser automatically executes, information such as the resolution of the screen, fonts used, operating system, hardware information and integrated browser plug-ins can be collected, which in their specific combination can ultimately enable a specific user to be traced back . The tracking technologies are used to make our website user-friendly. The use of tracking technologies may be technically necessary or it may be used for other purposes (e.g. analysis / evaluation of website usage).
Technically not necessary tracking
We also use cookies, pixels, browser fingerprinting and other tracking technologies on the website to enable analysis of users’ surfing behavior. For example, the following data is stored and processed:
- Entered search terms,
- Frequency of page views,
- Use of website functions.
The legal basis for this processing is your consent according to Art. 6 Para. 1 S. 1 lit. a) GDPR. The technically unnecessary cookies, pixels and other tracking technologies are automatically deleted after a specified period, which may differ depending on the tracking method. Insofar as we integrate third-party cookies or pixels and similar tracking technologies into our website, we will point this out to you separately below.
You can revoke your consent by clicking the slider in the “Cookie Settings” of the consent tool. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
Contacting our company
When you contact our company, e.g. by email or using the contact form on the website, the personal data you provide will be processed by us in order to answer your request. In order to process inquiries via the contact form on the website, it is absolutely necessary to provide a first and last name and a valid email address. You can also leave your telephone number voluntarily. At the time the message is sent to us, your IP address and the date and time of registration will also be processed. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) GDPR or Art. 6 Para. 1 S. 1 lit. If the request is aimed at the conclusion of a contract, the details of your data are necessary and binding for the conclusion of a contract. If the data is not provided, it is not possible to conclude or implement a contract in the form of contacting or processing the request. The processing of the personal data from the input mask is only used to process the contact. If you contact us by e-mail, there is also the necessary legitimate interest in processing the data. The other data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. In this context, the data is not passed on to third parties. We delete the data arising in this context one month after contact is made via the Contact form.
Processing for contractual purposes
We process your personal data if and to the extent that this is necessary for the initiation, establishment, implementation and / or termination of a legal transaction with our company. The legal basis for this results from Art. 6 Para. 1 S. 1 lit. b) GDPR. The provision of your data is necessary for the conclusion of the contract and you are contractually obliged to provide your data. If your data is not provided, it is not possible to conclude and / or execute a contract. After the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or deleted, unless we have given your consent (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual one Agreement, a legal authorization (e.g. authorization to send direct mail) or due to legitimate interests (e.g. storage to enforce claims) are authorized to further processing.
Your personal data will be passed on to third parties if
it is necessary for the establishment, execution or termination of legal transactions with our company (e.g. when passing on data to a payment service provider / a shipping company to process a contract with you), (Art. 6 Para. 1 S. 1 lit. b ) GDPR), or
a subcontractor or vicarious agent who we use exclusively in the context of providing the offers or services you require requires this data (unless you are expressly informed otherwise, such auxiliary persons are only entitled to process the data insofar as this is for the Provision of the offer or service is necessary), or
there is an enforceable official order (Art. 6 Para. 1 S. 1 lit. c) GDPR), or
there is an enforceable court order (Art. 6 Para. 1 S. 1 lit. c) GDPR), or
we are obliged to do so by law (Art. 6 Para. 1 S. 1 lit. c) GDPR), or
the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 Para. 1 S. 1 lit.d) GDPR), or
it is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority (Art. 6 Para. 1 S. 1 lit. e) GDPR), or
we can rely on our predominant legitimate interests or a third party for disclosure (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Your personal data will not be passed on to any other person, company or body unless you have given your valid consent to such a transfer. The legal basis for processing is then Article 6 Paragraph 1 Sentence 1 Letter a) GDPR. In the context of this data protection information, we refer you to the respective recipient with regard to the respective processing operation.
Hosting
We use external hosting services from SERED HOSTING S.L (C/ Rúa do Progreso 177 , 1º A Rua de Valdeorras, Ourense, Galicia), which provide the following services: infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. For these purposes, all data – including the access data mentioned under “Use of our website” – that are required for the operation and use of our website are processed. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit.f) GDPR. With the use of external hosting services, we pursue an efficient and secure provision of our website.
You can object to the processing. You have the right to object for reasons that arise from your particular situation. You can send us your objection using the contact details given in the section “Contact”.
Statistical and analytical and marketing services
We use third-party services for statistical, analysis and marketing purposes. This enables us to provide you with a user-friendly, optimized use of the website. The third-party providers use cookies and other tracking technologies to control their services. In the following, we will inform you about the services of external providers currently used on our website as well as about the respective processing in individual cases and about your existing possibilities of objection.
Google Analytics
We use the web analysis service “Google Analytics” from “Google”. The provider and data recipient is Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC 1600 Amphitheater Parkway Mountain View, CA 94043, USA; hereinafter: “Google”). When using “Google Analytics”, technologies such as “cookies”, “tracking pixels” and “device fingerprinting” are used to understand certain user behavior on websites. Information that is stored on users’ end devices is also processed.
With the help of the “tracking pixels” integrated into websites and the “cookies” stored on users ‘end devices, “Google” processes the information generated about the use of our website by users’ end devices and access data for the purpose of statistical analysis – e.g. B. that a certain website has been accessed or a newsletter subscription has taken place. For this purpose, it can also be determined whether different end devices belong to you or your household. The access data includes in particular the IP address, browser information, the previously visited website and the date and time of the server request.
“Google Analytics” is used with the extension “anonymizeIp ()”. As a result, IP addresses are further processed in abbreviated form in order to make it more difficult to identify them personally. According to Google, the IP addresses are shortened within member states of the European Union. Due to the “Google Analytics” tool used, the user’s browser automatically establishes a direct connection to the Google server.
If users are registered with a Google service, Google can assign the visit to the user account and create and evaluate cross-application user profiles.
Your data will be processed on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR.
“Google” processes some of the data in the USA and has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). There is no adequacy decision by the EU Commission for a data transfer to the USA; The legal basis for the transfer to the USA is your consent according to Art. 49 Para. 1 S. 1 lit. a) GDPR.
The data related to “Google Analytics” will be deleted after twenty-four months.
Further information on data protection at “Google” can be found at: http://www.google.de/intl/de/policies/privacy.