Privacy policy

We take the protection of your personal data very seriously. Below, we would like to inform you about the processing of your personal data when using our platform "JustSlips.com".

  1. Data Controller

Responsible for data processing under the General Data Protection Regulation (GDPR) is:

Samuel Ruoff Schelmenwasen 21 72160 Horb am Neckar

  1. Legal Basis

Our data processing practices comply with the requirements of EU Directive 2021/514 on the protection of personal data.

  1. Tools and Add-ons Used

a) Servers via IONOS SE IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, provides the servers on which our platform is hosted.

The provider of the pages automatically collects and stores information in server log files that your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

These data will not be merged with other data sources.

The collection of these data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.

b) Domain with SSL certificate We use an SSL certificate to establish a secure connection between your browser and our server.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

c) Email newsletter via Klaviyo We use the Klaviyo service to send newsletters, provided by Klaviyo Inc., based in Boston, Massachusetts, USA. Address: Klaviyo Inc., 125 Summer St., Floor 3, Boston, MA 02110, USA. For more information on Klaviyo's privacy policy, please visit: https://www.klaviyo.com/privacy.

d) reCAPTCHA To protect against spam messages, we use reCAPTCHA, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For more information on Google's privacy policy, please visit: https://policies.google.com/privacy.

e) Shipping service providers We work with various shipping service providers to deliver your orders. These include:

  • DHL: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn
  • UPS: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss
  • Japan: Japan Post, 3 Chome-2-2 Kasumigaseki, Chiyoda City, Tokyo 100-8791, Japan
  • America: United States Postal Service, 475 L'Enfant Plaza SW, Washington, DC 20260, USA
  • France: La Poste, 44 Boulevard de Vaugirard, 75757 Paris, France

f) Social Media We use social media for communication and advertising. Data may be transferred to countries outside the EU. Please refer to the privacy policies of the respective providers:

g) Analysis tools and advertising We use various analysis tools and advertising partners to analyze and improve the use of our platform, including:

h) Use of Goaffpro For online marketing activities, we use the affiliate marketing tool Goaffpro. Address: Goaffpro LLC, 505 Montgomery St, 10th Floor, San Francisco, CA 94111, USA. For more information on Goaffpro's privacy policy, please visit: https://www.goaffpro.com/privacy

i) Google Play Store App For providing our app in the Google Play Store, Google's privacy policy applies. Address: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

j) New law of the EU Directive 2021/514 According to EU Directive 2021/514 (DAC-7 Directive), we are required to record your income and tax information and transmit it to the relevant tax authority in the EU if you complete more than 30 orders or earn more than €2000 as a seller.

  1. How we store customer data on the platform Customer data is stored on secure servers and transmitted encrypted. Access to this data is only possible for authorized employees who are obligated to maintain confidentiality.

  2. Rights of data subjects As a user, you have the right to information, correction, deletion, restriction of processing, and data portability of your personal data. Please contact us using the contact information provided.

  3. Data processing when ordering When ordering, the data required for processing will be collected and processed. This includes, among other things, name, address, payment information, and product information.

  4. General information on the legal bases of data processing on this website If you have given your consent to the processing of your personal data, we will process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special categories of data according to Art. 9 para. 1 GDPR are processed. In case of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your terminal device (e.g., via device fingerprinting), data processing will also take place on the basis of § 25 para. 1 TTDSG. Consent can be revoked at any time. If your data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. The relevant legal bases for data processing in individual cases are explained in the following paragraphs of this privacy policy.

Note on data transfer to countries that are not secure third countries under data protection law and the transfer to US companies that are not DPF certified

We use tools from companies based in countries that are not secure third countries under data protection law, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to and processed in these countries. Please note that no data protection level comparable to that of the EU is guaranteed in countries that are not secure third countries under data protection law.

We note that the USA, as a secure third country, generally has a data protection level comparable to that of the EU. A data transfer to the USA is permissible if the recipient has a certification under the "EU-US Data Privacy Framework" (DPF) or has appropriate additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.

Recipients of personal data In the course of our business activities, we work with various external entities. In some cases, it is also necessary to transfer personal data to these external entities. We only pass on personal data to external entities if this is necessary within the framework of contract fulfillment, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the transfer, or if another legal basis allows the transfer of data. When using processors, we only pass on personal data of our customers on the basis of a valid contract for order processing. In the case of joint processing, a joint processing agreement is concluded.

Revocation of your consent to data processing Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to data portability You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done if it is technically feasible.

SSL or TLS encryption This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion You have the right to free information about your stored personal data, their origin and recipient and the purpose of data processing, as well as the right to correct, block or delete this data at any time within the scope of applicable legal regulations. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.

Opposition to advertising mails The use of contact data published within the scope of the legal notice obligation for the transmission of not expressly requested advertising and information material is hereby contradicted. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam e-mails.