Datenschutzerklärung

 

Introduction

This Privacy Policy explains how graffitiwallarts.shop collects, uses, stores, shares and otherwise processes personal data when individuals visit our website, interact with our services, create an account, communicate with us or purchase products.

We are committed to processing personal data responsibly and in accordance with applicable data-protection requirements, including the General Data Protection Regulation (GDPR) where applicable.

For privacy-related questions:

Email: info@graffitiwallarts.shop

Data Controller

For processing activities for which graffitiwallarts.shop determines the purposes and means of processing, graffitiwallarts.shop acts as the data controller.

Privacy enquiries and data-subject requests may be submitted to:

info@graffitiwallarts.shop

Categories of Personal Data

Depending on how an individual interacts with our store, we may process information such as:

  • Name;
  • Billing information;
  • Delivery information;
  • Email address;
  • Telephone number where provided;
  • Account information;
  • Order information;
  • Products purchased;
  • Shopping-cart information;
  • Payment transaction information;
  • Refund information;
  • Customer-service correspondence;
  • IP address;
  • Browser type;
  • Device information;
  • Cookie identifiers;
  • Website interaction information;
  • Referral information;
  • Marketing preferences;
  • Consent records; and
  • Fraud-prevention or security information.

We seek to collect only information that is appropriate for legitimate business and legal purposes.

Payment Information

Payments may be processed by third-party payment providers.

Depending on the payment method selected, payment providers may independently collect and process payment card information, bank information, account identifiers or other transaction data.

We do not necessarily receive or store complete payment-card credentials.

Payment providers process information according to their applicable terms and privacy practices.

Purposes of Processing

We may process personal data for purposes including:

  • Providing our website;
  • Processing orders;
  • Accepting payments;
  • Delivering products;
  • Providing order confirmation;
  • Communicating shipping information;
  • Providing customer support;
  • Processing returns;
  • Processing refunds;
  • Managing customer accounts;
  • Detecting fraud;
  • Protecting website security;
  • Preventing misuse;
  • Complying with legal obligations;
  • Maintaining accounting and transaction records;
  • Establishing or defending legal claims;
  • Improving store functionality;
  • Analysing website performance where lawfully permitted;
  • Managing customer preferences; and
  • Sending marketing communications where legally permitted.

Legal Bases Under the GDPR

Where the GDPR applies, processing may be based on one or more lawful grounds.

Performance of a Contract

We may process personal data where necessary to:

  • Process an order;
  • Take payment;
  • Arrange delivery;
  • Handle a return;
  • Provide customer service relating to a purchase; or
  • Take steps requested by a customer before entering into a contract.

Compliance With Legal Obligations

We may process information where necessary to comply with obligations concerning:

  • Accounting;
  • Taxation;
  • Consumer protection;
  • Regulatory requirements;
  • Fraud investigations;
  • Legal proceedings; and
  • Other mandatory legal requirements.

Legitimate Interests

Where appropriate, we may process information for legitimate interests such as:

  • Preventing fraud;
  • Securing our systems;
  • Preventing abuse;
  • Managing business operations;
  • Improving customer service;
  • Establishing or defending legal claims; and
  • Understanding store performance.

Where legitimate interests are relied upon, we consider whether those interests are overridden by the rights and freedoms of affected individuals.

Consent

Where required, we may rely on consent for activities including:

  • Certain marketing communications;
  • Non-essential cookies;
  • Advertising technologies;
  • Analytics technologies; and
  • Other processing activities requiring consent.

Consent may be withdrawn at any time without affecting processing that was lawful before withdrawal.

Shopify

Our ecommerce store may use Shopify technology to provide storefront, checkout, order-management and related ecommerce functions.

Shopify may process customer information in connection with providing its services.

Depending on the applicable processing activity, Shopify may process information as a service provider/processor or may have separate responsibilities under applicable privacy law.

Cookies and Similar Technologies

Our website may use cookies, pixels, local storage and similar technologies.

Some technologies are strictly necessary to:

  • Operate the shopping cart;
  • Maintain website security;
  • Facilitate checkout;
  • Remember essential customer choices;
  • Prevent fraud; and
  • Provide services specifically requested by the customer.

Other technologies may be used for:

  • Analytics;
  • Advertising;
  • Personalisation;
  • Audience measurement; and
  • Marketing.

Where German or European law requires consent before non-essential technologies are placed or accessed, such technologies should not be activated until the required consent has been obtained.

Customers may manage available privacy choices through the cookie-consent mechanism displayed on the website.

Marketing Communications

Where permitted by law, customers may receive marketing communications if they have provided the required consent or another valid legal basis applies.

Customers may withdraw marketing consent by:

Withdrawal from marketing does not prevent us from sending transactional communications necessary to process an order or provide customer service.

Sharing Personal Data

We may share personal data with service providers where reasonably necessary to operate our ecommerce business.

Categories of recipients may include:

  • Ecommerce platform providers;
  • Payment processors;
  • Shipping carriers;
  • Logistics providers;
  • Fulfilment providers;
  • Cloud-hosting providers;
  • Security providers;
  • Fraud-prevention providers;
  • Analytics providers where legally permitted;
  • Customer-service providers;
  • Professional advisers;
  • Tax and accounting providers; and
  • Government or regulatory authorities where legally required.

Service providers are expected to process data in accordance with applicable legal and contractual requirements.

International Transfers

Some providers used in connection with an ecommerce transaction may operate outside Germany or the European Economic Area.

Where GDPR-protected personal data is transferred internationally, we seek to rely on an appropriate transfer mechanism where required, such as:

  • An adequacy decision;
  • Standard Contractual Clauses;
  • Other legally recognised safeguards; or
  • Another lawful transfer mechanism.

Data Retention

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required by applicable law.

Retention periods may depend on:

  • Contractual obligations;
  • Accounting requirements;
  • Tax requirements;
  • Consumer claims;
  • Fraud-prevention requirements;
  • Dispute resolution;
  • Legal limitation periods; and
  • Regulatory obligations.

When information is no longer required, it may be deleted or anonymised in accordance with applicable requirements.

Data Security

We use reasonable technical and organisational safeguards designed to protect personal data against:

  • Unauthorised access;
  • Unlawful disclosure;
  • Accidental destruction;
  • Loss;
  • Alteration;
  • Misuse; and
  • Other unlawful processing.

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

Customers should use appropriate precautions when protecting account credentials and personal devices.

GDPR Rights

Subject to applicable conditions and exceptions, individuals covered by the GDPR may have rights including:

  • The right of access;
  • The right to rectification;
  • The right to erasure;
  • The right to restriction of processing;
  • The right to data portability;
  • The right to object to certain processing;
  • The right to withdraw consent;
  • Rights relating to certain automated decision-making; and
  • The right to lodge a complaint with a competent data-protection supervisory authority.

Requests may be sent to:

info@graffitiwallarts.shop

We may need to verify the requester's identity before fulfilling a request.

Right to Object

Where processing is based on legitimate interests, an individual may have the right to object based on circumstances relating to that individual.

Where personal data is processed for direct marketing, an individual may object to such processing as provided by applicable law.

Automated Decision-Making

We do not intend to make decisions producing legal or similarly significant effects solely through automated processing unless this is lawfully permitted and appropriate safeguards are implemented.

Automated systems may nevertheless assist with ordinary ecommerce activities such as fraud detection, security analysis and payment-risk assessment.

Children's Privacy

Our store is intended for ordinary ecommerce customers capable of entering into legally valid transactions.

We do not knowingly seek to collect personal data from children in circumstances where parental authorisation is legally required and has not been obtained.

Third-Party Websites

Our website may contain links to external websites.

We do not control the privacy practices of unrelated third parties.

Customers should review the privacy information of third-party websites before providing personal information to them.

Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect:

  • Changes to our services;
  • Changes to our technology;
  • New legal requirements;
  • Changes to service providers; or
  • Changes to our processing practices.

Material changes will be communicated where legally required.

Privacy Contact

Questions or requests concerning personal data may be submitted to:

graffitiwallarts.shop
Email: info@graffitiwallarts.shop