Privacy Policy
Introduction to Our Privacy Policy:
In the following text, we would like to inform you about the processing of your personal data by us and the claims and rights to which you are entitled under data protection regulations, in particular the European General Data Protection Regulation (GDPR).
This data protection declaration explains the type, scope and purpose of the processing of personal data within our website www.avmm-store.com (hereinafter "website"). The data protection declaration applies regardless of the domains, platforms and devices used (e.g. desktop, mobile , etc.). This data protection declaration also applies to our Facebook, Instagram, Pinterest and YouTube presences.
Personal data within the meaning of the GDPR is data that can be related to you personally, for example name, address, email addresses, and user behavior. Which data is processed in detail and how it is used depends largely on the services you use with us, which we will explain in further detail.
We use various other terms within the meaning of the GDPR in our data protection declaration. This includes terms such as processing, restriction of processing, profiling, pseudonymization, person responsible, processor, recipient, third party, consent, supervisory authority and international organization. You can find the corresponding definitions for these terms in Art. 4 GDPR.
Responsible person for the processing of your data:
Molly McDonnell
Kopenhagener Str. 26
Berlin 10437
Ust-ID - DE322173488
Tel: +49 15735114221
Email : info@avmm-store.com
1 - When do we collect your data:
-When you use/visit our website through the use of cookies
-When you create a customer account with us by registering on our website
-When you make a purchase from us by placing an online order
-When you subscribe to our newsletter
-When you contact us directly via email.
-When you follow our Facebook fanpage, pinterest and youtube presence.
1.1 Visiting our Website (cookies)
Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. This information is used to track visitor use of the website and to compile statistical reports on website activity.
For further information visit www.aboutcookies.org or www.allaboutcookies.org.
See paragraph 10 devoted to the use of cookies.
1.2 Customer Account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
1.3 Placing an Order
When you place an order with us, we only collect and use your personal data when necessary, for the fulfilment and handling of your purchase with us. The provision of data is necessary for conclusion of a contract with us. Failure to provide this information will prevent the conclusion of a contract with us. The processing will occur on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. We will not forward your data to third parties without your explicit consent. This excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. Along with the recipients named in the clauses of this data protection declaration, these may be recipients in the following categories: Shipping providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
1.4 Newsletters
We use your email address outside of contractual processing exclusively to send you a newsletter for our own marketing purposes, if you have explicitly agreed. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us directly. Your email address will then be removed from the distributor (our chosen third party newsletter provider Omnisend). Your data will be forwarded to a service provider for email marketing in the course of order processing and transferred to a third country, which is covered by an adequacy decision by the European Commission. It will not be forwarded to other third parties.
1.5 Direct Marketing
We use your email address, which we obtained in the course of either selling a good or service to you, or from when you signed up to our newsletter, for the electronic transmission of marketing for our own goods or services which are similar to those you have already purchased from us, unless you have objected to this use. You must provide your email address in order to conclude a contract. Failure to provide it will prevent the conclusion of any contract. The processing will be carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in direct marketing. You can object to this use of your email address at any time by contacting us. You will find the contact details for exercising your right to object in our imprint as well as with the link provided in all emails you receive from us in the form of marketing.
2 - Who We Share Your data With
-Shipping Companies
-Shopify
-Payment Service Providers
2.1 Shipping Companies
We forward data: first and last name, address, telephone number and email to the shipping company commissioned for the fulfillment of the contract, insofar as is necessary for the delivery of ordered goods.
The purpose and passing on of your personal data to the shipping company is solely to send your ordered products to fulfill the contract.
The legal basis for the transfer of personal data for the dispatch of the ordered products is Article 6 Paragraph 1 lit. b GDPR.
2.2 Shopify
To operate our website, we use the services of the e-commerce platform and cloud service provider Shopify, which is developed and operated by Shopify Inc. 1266 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5 (hereinafter referred to as “Shopify”) ).
The purpose of using Shopify is to be able to sell our offered goods online quickly, easily and securely. We also aim to simplify the use of our website for you and make your visit more comfortable with the use of Shopify e-commerce hosting.
We use the following Shopify services: online presence, web hosting, processing of orders on the website, sending and hosting of e-mails, notifications, general function to register and manage a personal user account, including storage of passwords, data storage infrastructure, provision of Shopify Payments and payment gateways, provision of a connector for payment via PayPal and other third party payment providers, SSL certificate and cookies management, including cookies banners.
Shopify processes the data mentioned above, as well as the data when contacting us via the contact form and by e-mail, Cookies (see section “Cookies”), payment data ( e.g. bank details, invoices, payment history) and contract data (e.g. subject matter of the contract, customer category) on our behalf.
Shopify has structured its data streams to transfer data to Shopify's Irish subsidiary in Europe. Additionally, in direct transfers to Shopify Inc., Shopify would rely on the European Commission's adequacy decision with respect to Canadian Data Protection Act, which extends to Shopify Inc. as a Canadian company. For this purpose, the EU-US “Privacy Shield” agreement on data protection has also been concluded with Shopify. In this regard, a data protection agreement has also been concluded with Shopify.
According to Art. 6 Para. 1 f) GDPR, the legal basis for data processing is our overriding legitimate interest in providing our website.
In addition to our data protection notices, the data protection notices from Shopify apply.
Shopify's privacy policy can be found at: https://www.shopify.com/legal/privacy.
2.3 Payment Service Providers
We have commissioned Shopify to process payments and refunds. The payment service providers receive the payment data directly.
The data processed by the payment service provider includes the following data, such as the first and last name, address, bank details such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, sum and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative information about the payment. The data may be transmitted to credit agencies by some payment service providers. The purpose of this transmission is to check your identity and creditworthiness. For this we refer to the terms and conditions and the data protection information of the payment service providers.
For payment transactions, the terms and conditions and the data protection information of the respective payment service provider apply, which can be called up within the respective websites or transaction applications. We refer to this also for the purpose of further information and assertion of revocation, information and other rights of data subjects.
Processed data types from customers and payer: first and last name, address, telephone number, email address, date and time of the order, payment data (e.g. bank details, invoices, payment history), contract data (e.g. subject matter of the contract), sometimes access data.
Legal basis: fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Par. 1 S. 1 lit. No order processing within the meaning of Art. 4 No. 8 GDPR (but your own responsibility)
Offered Payment service providers:
Visa: payment services; Service provider: Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, GB; Website: https://www.visa.de; Data protection declaration: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.
MasterCard: Payment Services; Service provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium; Website: https://www.mastercard.de/de-de.html; Data protection declaration: https://www.mastercard.de/de-de/datenschutz.html.
American Express: payment services; Service provider: American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany; Website: https://www.americanexpress.com/de; Data protection declaration: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html.
Klarna / Sofortüberweisung: payment services; Service provider: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden; Website: https://www.klarna.com/de; Data protection declaration: https://www.klarna.com/de/datenschutz.
Apple Pay: payment services; Service provider: Apple Inc., Infinite Loop, Cupertino, CA 95014, USA; Website: https://www.apple.com/de/apple-pay/; Privacy policy:
https://www.apple.com/legal/privacy/de-ww/.
Google Pay: payment services; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Website: https://pay.google.com/intl/de_de/about/; Data protection declaration: https://policies.google.com/privacy.
Bancontact: payment services; Service provider Bancontact Payconiq Company NV / SA., Rue d’Arlon 82, 1040-Brussels, Belgium. https://www.bancontact.com/files/privacy.pdf
Shop Pay / Shopify: https://www.shopify.de/legal/agb, https://www.shopify.com/legal/privacy.
3 - How Long Your Data Will Be Stored?
-ACCESS DATA
For security reasons (e.g. to investigate acts of abuse or fraud), log file information is stored for a maximum of 7 (seven) days and then deleted (see point 2.1.1. Above). Data, the further storage of which is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified.
-APPLICATION DATA
Applicant data will be deleted immediately in the event of rejection. In the event that you have consented to your personal data being stored further, we will transfer your data to our applicant pool. The data will be deleted there if you revoke your consent or after 2 years at the latest. If we fill the advertised position with you, your data will be saved in our personnel management system.
-MANAGING YOUR REGISTRATION AS USERS OF OUR WEBSITE
We store your data for the time that you are a registered user with us (i.e. until you log off). You can cancel your registration of your user account directly on our website or by contacting us: info@avmm-store.com
-NEWSLETTER SUBSCRIPTION
We process your data until you unsubscribe or cancel your newsletter subscription.
-PROCESSING, FULFILLMENT AND IMPLEMENTATION OF THE PURCHASE AGREEMENT
If necessary, we process and save your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a contract or contact.
If the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible if there are no contractual or legal obligations to prevent deletion.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The data processed by us will be deleted in accordance with the legal requirements as soon as the consents allowed for processing are revoked or other permissions are no longer applicable (e.g. if the purpose of processing this data is no longer applicable or is not required for the purpose).
We are subject to various retention and documentation obligations, which result from the Commercial Code (HGB) and the Tax Code (AO), among other things. The periods for storage and documentation specified there are two to ten years.
The storage period is also assessed according to the statutory limitation periods, which, for example, according to § 195 ff. Of the German Civil Code (BGB) can usually be 3 years, but in certain cases also up to thirty years, whereby the regular limitation period is three years.
4 - Your Privacy Rights
The right to information according to Art. 15 GDPR (i.e. you have the right to request information about your personal data stored by us at any time) Here
The right to correction according to Art. 16 GDPR (i.e. in the event that your personal data is incorrect or incomplete, you can request that this data be corrected)
The right to deletion according to Art. 17 GDPR and the right to restriction of processing according to Art. 18 GDPR (ie you may have the right to request the deletion or restriction of the processing of your personal data if, for example, for such processing no longer exists for a legitimate business purpose and statutory retention requirements do not require further storage),
You can edit or delete your personal data by first logging into your account and then going here.
The right to data portability from Art. 20 GDPR (ie you may have the right to receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format and this data to another person responsible without hindrance to be transmitted)
The right of revocation of your consent: you have the right to revoke your consent to the processing of your data that you have given us at any time by post or email to:
Molly McDonnell
Kopenhagener Str. 26
10437 Berlin Germany
5 - Your Right to Object and Appeal
There is a right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). You can find the supervisory authority responsible for you at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
There is the right of objection according to Art 21 GDPR:
Information about your right of objection according to Article 21 GDPR
You have the right, for reasons that arise from your particular situation, to object at any time to the processing of personal data concerning you which is based on Article 6 (1) (e) GDPR (data processing in the public interest) and Article 6 (1) (f) the General Data Protection Regulation (data processing on the basis of a weighing of interests) takes place, to lodge an objection.
If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
The objection can be made informally and there are no costs other than the transmission costs according to the basic tariffs.
Objection should be addressed to:
Molly McDonnell
Kopenhagener Str. 26
Berlin 10437 Germany
6 - Statistics, Analysis and Marketing
6.1 Google Analytics
Based on our legitimate interests (our interest in the analysis and optimization of our website) we use the web analysis service Google Analytics from Google Inc. ("Google"). The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA. 94043, USA. The web analysis service Google Analytics uses cookies. These are small text files that your web browser saves on your device and enable an analysis of website usage. The information generated by the cookies about the use of our website is usually sent to a server by Transferred to Google in the USA and stored there.
Google will use this information on our behalf to evaluate the use of our website by our users, to compile reports on the activities within this website and to provide us with other services related to the use of this website.
Purposes of processing: Tracking (e.g. interest / behavior-related profiling, use of cookies), remarketing, visitor action evaluation, interest-based and behavior-related marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), range measurement (e.g. access statistics, recognition of recurring Visitors).
We use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases.
The following data is processed through the use of Google Analytics:
3 bytes of the IP address of the system visited by the website visitor (anonymized IP address),
the accessed website,
the website from which the user accessed the page called up our website (referrer),
the sub-pages that are accessed from the website,
the length of stay on the website,
the frequency with which the website is accessed.
Google is certified in accordance with the EU-US Privacy Shield Agreement and thus guarantees compliance with European data protection law:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
In order to fully comply with the statutory data protection requirements, we have concluded a contract processing / jointly responsible agreement with Google.
Our website does not use its own cookies, only Google Analytics cookies. These cookies do not contain any personal data, only anonymous data. The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; In addition, users can prevent the collection of the data generated by the cookie and its transmission to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/ dlpage / gaoptout? hl = de.
Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR). You can prevent Google Analytics from collecting data by deactivating the cookie settings. An opt-out cookie is set which prevents the future collection of your data when you visit this website.
Further information on data processing by Google, setting and objection options can be found on the Google website at https://policies.google.com/privacy?hl=de&gl=de.
6.2 Facebook remarketing
Our website uses the remarketing function “Custom Audiences” by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”).This function serves to address the visitor to the website with interest-related advertising on the social network Facebook. We have implemented Facebook’s remarketing tag on our website for this purpose. This tag sets up a direct connection to Facebook’s servers when you visit our website. This informs the Facebook server which of our web pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook you will then be shown personalised, interest-related Facebook ads. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in the above purpose.
You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.
For this purpose you can deactivate the remarketing function “Custom Audiences” here. You can find more detailed information on Facebook’s collection and use of data, your associated rights and options for protecting your privacy in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
7 - Social Media
We maintain an online presence within social networks, such as Facebook, Instagram, Pinterest and YouTube, which processes user data in this context in order to communicate with the users active there or to offer information about us. We have partially integrated components of the social network on our website. These can only be used if you are registered and logged in to the respective social network. If you are logged in with your user account for the respective network while visiting the website, this network can assign the visit to this account in order to learn more about you in this way.
The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offer in accordance with Art. 6 Para. 1 f) GDPR.
Furthermore, the data of users within social networks are usually processed for market research and advertising purposes. For example, usage profiles can be created on the basis of user behavior and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and the interests of the users are stored.
The terms of use and data protection of this provider apply to the use of the respective social network. For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https: //www.facebook.com;
Data protection declaration: https: //www.facebook.com/about/privacy; Privacy Shield (ensuring the level of data protection when processing data in the USA):
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Opposition option (opt-out):
Settings for advertisements: https: //www.facebook.com/settings? Tab = ads; Additional information on data protection on fan pages: Agreement on joint processing of personal data on Facebook pages (Art. 26 Para. 1 GDPR):
https://www.facebook.com/legal/terms/page_controller_addendum,
Data protection information for Facebook pages:
https://www.facebook.com/legal/terms/information_about_page_insights_data.
YOUTUBE
Our website uses YouTube LLC’s function for the embedding of YouTube videos.
Youtube is a Social network; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Data protection declaration: https://policies.google.com/privacy?hl=en
Social network; Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Data protection declaration: https://instagram.com/about/legal/privacy.
Social network; Service provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street Dublin 2, Ireland; Website https Data protection declaration: https://policy.pinterest.com/en/privacy-policy
8 - Social Plug Ins, YouTube Videos and Third Party content
We integrate functional and content elements on our website that are obtained from the servers of their respective providers (third-party providers), e.g. B. graphics, videos or social media buttons as well as contributions (hereinafter referred to as "content").
The third party providers of this content process the IP address of the user. The content cannot be sent to your browser without an IP address because the IP address is required for the display of this content or functions. Furthermore, the pseudonymous information can be stored in cookies on the user's device and, among other things, contain technical information about the browser and operating system, the websites to be referred to, the time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.
Purpose of processing: Provision of our online offer and user-friendliness.
The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offer in accordance with Art. 6 Para. 1 f) GDPR.
Service Providers and Services Used
Youtube
Facebook Plugin
Instagram Plugin
9 - Facebook Fanpage
We analyze how our fan pages are used (so-called insights function). We are jointly responsible for this with Facebook (Art. 26 Paragraph 1 GDPR). As part of the Insights function, we only receive anonymized statistics - we have no access to personal data that is processed by Facebook. The processing of the anonymized data by us takes place on the basis of a legitimate interest: to be able to understand user behavior on our fan page to gain a better understanding of the interests of the visitors to our fan page and to be able to record the range and effectiveness of our activities through prepared statistics (Art. 6 para . 1 f) GDPR).
The data processing when you visit our Facebook fan page takes place regardless of whether you have a Facebook account or not. If you have a Facebook account, Facebook can permanently assign the data to your account. If you do not have a Facebook account, Facebook can save your data by using cookies. Various information is written in cookies, which can be read out again at a later point in time. You can find more detailed information on Facebook cookies at https://de-de.facebook.com/policies/cookies/.
10 - Cookies
Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. This information is used to track visitor use of the website and to compile statistical reports on website activity.
Our website also uses cookies to allow us to analyse the surfing behaviour of visitors to our website.
We also use cookies to address visitors to other websites with targeted marketing relating to their interests.
Processing is carried out on the basis of § 15 (3) TMG (Telemedia Act) as well as art. 6 (1) lit. f GDPR due to our justified interest in the purposes above.
When you visit our website, you as a user will be informed about the use of cookies for analysis purposes by an info cookie banner and you will be referred to this data protection declaration.
You, the user, can determine and customize which type of cookies you allow directly on the cookie banner pop-up, which is always available by locating the fingerprint icon. The types of cookies we use are defined as Essential or Statistical & Marketing cookies.
A distinction is made between the following types of cookies and functions:
Essential cookies: these cookies are always activated as they are required for enabling basic functions of the website and for IT security reasons. These include cookies that can be used to store where you are on the website. Without these cookies, the website cannot function properly.
Statistics cookies: these help shop owners understand how visitors and customers interact with websites by anonymously collecting and reporting information (Art. 6 Para. 1 S. 1 lit. a) GDPR).
Marketing cookies: these are used to track visitors across the website. The aim is to place advertisements that are relevant and appealing to you.
Temporary cookies: (session or session cookies): these cookies are deleted at the latest after a user has left the website and closed their browser.
Permanent cookies: these cookies are saved even after the browser is closed.
First-party cookies: We set first-party cookies ourselves.
Third-party cookies: (third-party cookies): these cookies are mainly used by advertisers (so-called third parties) to process user information.
Cookies Settings
To learn more about the specific cookies we us, please visit our cookies settings page.
11 - Automated decision-making in individual cases, including profiling
In accordance with Article 22 GDPR we do not use fully automated automatic decision-making. We do not process your data automatically with the aim of evaluating certain personal aspects (profiling).
12 - We are complaint with current California Consumer Privacy Act
If you are shopping with us as a California resident and would like to learn more about your rights for opting out of any sale of your personal data please go here.
