Below we inform you about the type, scope and purpose of processing your personal data when using our shop at www.duoconspirito.com. Personal data is all information relating to an identified or identifiable natural person.
1. PERSON RESPONSIBLE
The person responsible within the meaning of the EU Basic Data Protection Regulation (DSGVO) is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data. For the personal data processed in this shop, the person responsible within the meaning of the DSGVO is: Matei Rusu (Detmold, Germany) telephone 0049 177 5972 914, e-mail: info@duoconspirito.com (hereinafter “we”).
2. WHEN YOU VISIT OUR WEBSITE
When you visit our website, our server collects the following information from your end device: browser type and version, operating system, the previously visited website (“referrer”), IP address and time of page view.
We collect and process this data to ensure the trouble-free operation of our website and to be able to detect, ward off and pursue any misuse of our services. Furthermore, we use the collected data for statistical purposes, for example to evaluate which end devices and browsers are used to access our shop in order to adapt and improve our offer to the needs of the users on an ongoing basis. This data processing is based on article 6 paragraph 1 letter f DSGVO.
We delete all the above-mentioned personal data no later than twelve months after it has been collected.
3. WHEN YOU PLACE AN ORDER
When you place an order in our shop, we process your name, the delivery address, your e-mail address and your telephone number, as you enter them during the ordering process. If you voluntarily provide further data when placing an order (e.g. a different billing address or company name), we will also process this data.
We process this data electronically for the proper fulfilment of the contract, in particular for delivery, invoicing, booking of payments and processing of returns and complaints. This data processing is based on article 6 paragraph 1 letter b DSGVO.
We will keep this data stored until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.
For a conclusion of a contract between you and us, it is necessary that we receive your name, the delivery address, your e-mail address and your telephone number. The necessity of providing this data results from legal regulations (such as § 312i para. 1 number 3 BGB, § 14 para. 4 UStG). Without the provision of this data, you can therefore not conclude a contract with us.
4. CUSTOMER ACCOUNT
You can, optionally, create a customer account in our online shop. The data required for this and processed by us result from the input mask for opening the customer account. The customer account is set up exclusively at your request. The legal basis is therefore your consent in accordance with article 6 paragraph 1 letter a DSGVO. We will keep the personal data associated with the customer account until you delete the customer account or you ask us to delete it. For personal data from contracts already concluded, the retention periods as set out in the section “When you place an order” remain the same, regardless of the existence of the customer account.
5. SHIPPING AND PAYMENT
When we send physical goods on the basis of the purchase contract, we will transmit the name and address of the recipient to Deutsche Post (Deutsche Post AG, 53113 Bonn) or DHL (DHL Paket GmbH, 53113 Bonn) as the shipping service provider, for the purpose of delivering the shipment.
In order to pay for your purchase, the payment service provider you have chosen will collect and process your name, e-mail address, card or account number and/or other data, insofar as this is necessary for the payment method you have chosen. In this respect, the contractual and data protection provisions of the payment service provider selected by you shall apply additionally.
When we receive a payment, we process the data that the payment service provider sends us. Which data this is depends on the payment service provider you have chosen.
The processing is based on article 6 paragraph 1 letter b DSGVO. We keep this data until all mutual claims arising from the respective contractual relationship with you have been settled in full and the retention periods under commercial and tax law to which we are subject have expired.
6. PROCESSORS
We use the following services to support our merchandise management (order management, invoicing, accounting, delivery):
Woocommerce and WordPress (WordPress Corporate Office Headquarters Automattic Inc. 60 29th Street #343, San Francisco, California 94110-4929 USA)
to which we transmit the data specified in the section “When you place an order” for order processing in accordance with Article 28 DSGVO.
7. NEWSLETTER AND “FOLLOW” FUNCTION
If you have subscribed to our newsletter or have signed up for the “Follow” function, we will inform you by e-mail about our new albums, projects and concerts. You will not receive more than one newsletter per month. You can informally object to the use of your e-mail address for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates.
This data processing is based on your consent in accordance with Article 6 paragraph 1 letter a DSGVO. If you withdraw your consent to the use of your e-mail address for advertising purposes, we will delete your e-mail address from our newsletter distribution list and/or from our “follow” service.
As a technical service provider for sending our newsletter and for sending information as part of our “follow” function, we use the Mailchimp service of The Rocket Science Group (“Mailchimp”), LLC 675 Ponce de Leon Ave NE Suite 5000. Atlanta, GA 30308, USA. We have concluded an order processing contract with Mailchimp (article 28 DSGVO) including the so-called EU standard contract clauses (article 46 DSGVO)
8. USE OF COOKIES
If you have agreed to the use of cookies, we will place one or more “cookies” on your terminal device. A cookie is a small text file that enables us to recognise your device when you visit our shop again at a later date. Cookies also enable us to analyse certain user behaviour, e.g. which products you look at, how long you stay on our site and when and how often you return to our website. Cookies stored by us are deleted at the latest twelve months after your last visit to our shop.
This data processing takes place on the basis of your consent in accordance with Article 6 paragraph 1 letter a DSGVO and Article 6 paragraph 1 letter f DSGVO for the purpose of better tailoring our product range to the wishes of our shop visitors and optimising the functions of our shop and the efficiency of advertising measures.
Independently of whether you have consented to the use of cookies on our website, you can prevent cookies from being stored by going to the cookie settings of your Internet browser and object to the storage of cookies there for our website or for all websites. There you can also delete cookies that have already been stored.
Find out more about Cookie Policy
9. GOOGLE SERVICES
We use certain services of Google for our shop. If you are visiting our Shop from a location in the European Union, Norway, Iceland, Liechtenstein or Switzerland, “Google” means Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, otherwise Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For general information about Google’s use of data, please visit https://policies.google.com/technologies/partner-sites (“How we use data from websites or apps on which our services are used”).
10. GOOGLE ANALYTICS
We use Google Analytics, a web analysis service from Google. Google places cookies on your end device. These cookies enable Google to collect information on how you use our website. This information is transferred to a Google server, evaluated there and made available to us. The legal basis for this is your consent in accordance with Article 6 paragraph 1 letter a DSGVO and Article 6 paragraph 1 letter f DSGVO, namely our legitimate interest in the evaluation and optimisation of our Internet offering.
We use Google Analytics with activated IP anonymisation. This means that your IP address is usually shortened within the scope of the DSGVO in such a way that the IP can no longer be used to identify you. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser is not combined with other data from Google. You can prevent the storage of cookies by adjusting your browser software accordingly.
11. SOCIAL MEDIA
Social media buttons may be displayed in our website; they can be recognised by the logos of the social media platforms (hereinafter “platforms”) (e.g. Facebook: “f” logo). A click on such a button calls up the website of the respective platform, whereby the IP address of the calling terminal and the address of the page from which the link is made (“referrer”) are transmitted to the called platform.
12. INFORMATION ABOUT SOCIAL MEDIA FAN PAGES
We maintain social media profiles on the social networks of Facebook and Instagram (so-called “fan pages”). We regularly publish and share content on our fan pages. The operators of the social networks record your usage behaviour via cookies and similar technologies upon every interaction on our fan pages or other Facebook or Instagram websites. Fan page operators can view general statistics about the interests and demographic characteristics (e.g. age, gender, region) of fan page visitors. When you use social networks, the nature, scope and purposes of processing social network data are determined primarily by the social network operators.
The Facebook and Instagram social networks are both provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
Insofar as you communicate directly with us via our fan pages or share personal content with us, we shall be responsible for processing your data. An exception applies to the data processing for usage analysis (Page Insights) which is described in the following; in this case, we are jointly responsible with Facebook.
Whenever you interact with fan pages, Facebook uses cookies and similar technologies to track the usage behaviour of fan page visits. On this basis, fan page operators receive so-called “Page Insights”. Page insights contain only statistical, depersonalised (anonymised) information about visitors to the fan page, which can therefore not be assigned to a specific person. We do not have access to the personal information Facebook uses to create Page Insights (“Page Insights data”). Selection and processing of Page Insights data is performed exclusively by Facebook.
Page insights offer us information about how our fan pages are used, what interests visitors to our fan pages have, and what topics and content are particularly popular. This allows us to optimise our fan page activities, e.g. by better tailoring to the interests and usage habits of our audience when planning and selecting content.
Processing of your data by Facebook
Please note that Facebook also processes your data when you use our fan pages for their own purposes, which are not covered in this Privacy Notice. We have no influence over these data processing operations of Facebook. In this regard, we refer you to the privacy policy of the respective social networks:
13. YOUR RIGHTS
You have the following rights with regard to the personal data we process about you:
You have the right to ask us to confirm whether we are processing personal data concerning you. If this is the case, we will inform you of the personal data stored about you and the further information in accordance with Article 15, paragraphs 1 and 2 of the DSGVO.
You have the right to have incorrect personal data concerning you corrected without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
You can demand that we delete the personal data relating to you without delay under the conditions of Article 17 paragraph 1 DSGVO, insofar as their processing is not required under Article 17 paragraph 3 DSGVO.
You can request us to restrict the processing of your data if one of the conditions of Article 18 paragraph 1 DSGVO applies. In particular, you can demand the restriction instead of deletion.
We will notify all recipients to whom we have disclosed personal data relating to you of any correction or deletion of your personal data and of any restriction on processing, unless this proves impossible or involves a disproportionate effort. We will also inform you of these recipients if you so request.
You have the right to receive the personal data you have provided us with in a structured, common and machine-readable format and may request that we transfer this data to another person in charge without hindrance as far as this is technically possible.
If data processing is based on your consent, you have the right to revoke your consent at any time. Revocation of your consent does not affect the lawfulness of the data processing that has taken place until your revocation.
RIGHT OF OBJECTION: FOR REASONS ARISING FROM YOUR SPECIFIC SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; this right of objection applies to data processing carried out on the basis of Article 6 paragraph 1 letter f of the DPA in order to safeguard legitimate interests on our part or on the part of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, outweigh the processing. If you exercise your right of objection, we will no longer process the data concerned unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
IN CASE WE PROCESS PERSONAL DATA FOR DIRECT MARKETING PURPOSES (E.G. NEWSLETTER), YOU MAY, AT ANY TIME, OBJECT TO PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING, WITH THE RESULT THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.
If you believe that the processing of your personal data is in breach of the DPA, you may lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the alleged breach. This does not preclude other administrative or judicial remedies.
