We take the protection of your personal data very seriously. Below we would like to inform you about the processing of your personal data when using our platform "JustSlips.com".
1. Person responsible
Responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Samuel Ruoff
Schelmenwasen 21
72160 Horb am Neckar
2. Legal basis
Our data processing practices comply with the requirements of EU Directive 2021/514 on the protection of personal data.
3. Tools and add-ons used
a) Servers via IONOS SE IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, provides the servers on which our platform is hosted.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
browser type and browser version
operating system used
Referrer URL
hostname of the accessing computer
time of the server request
IP Address
This data will not be merged with other data sources.
This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this purpose, the server log files must be recorded.
b) Domain with SSL certificate We use an SSL certificate to establish a secure connection between your browser and our server.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.
c) E-mail newsletter via Klaviyo To send newsletters, we use the Klaviyo service, provided by Klaviyo Inc., based in Boston, Massachusetts, USA. Address: Klaviyo Inc., 125 Summer St., Floor 3, Boston, MA 02110, USA. For more information about Klaviyo's privacy policy, please visit: https://www.klaviyo.com/privacy .
d) reCAPTCHA To protect against spam messages, we use reCAPTCHA, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For more information about data protection at Google, please visit: https://policies.google.com/privacy .
e) Shipping service providers We work with various shipping service providers to deliver your orders to you. These include:
- DHL: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn
- UPS: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss
- Japan: Japan Post, 3 Chome-2-2 Kasumigaseki, Chiyoda City, Tokyo 100-8791, Japan
- Amerika: United States Postal Service, 475 L'Enfant Plaza SW, Washington, DC 20260, USA
- France: La Poste, 44 Boulevard de Vaugirard, 75757 Paris, France
f) Social media We use social media for communication and advertising. Data may be transferred to countries outside the EU. Please note the data protection guidelines of the respective providers:
- Facebook: https://www.facebook.com/privacy/explanation
- Instagram: https://help.instagram.com/519522125107875
- WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea
- Google: https://policies.google.com/privacy
- TikTok: https://www.tiktok.com/legal/privacy-policy?lang=en
- X (formerly Twitter): https://twitter.com/de/privacy
g) Analysis tools and advertising We use various analysis tools and advertising partners to analyze and improve the use of our platform. These include, among others:
- IONOS WebAnalytics: An analysis tool from IONOS SE for evaluating website visits. Address: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. Further information can be found in the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy/
- Google Analytics: A service provided by Google LLC to analyze website usage. Address: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For more information, see Google's privacy policy: https://policies.google.com/privacy
- Google ADS: An advertising service provided by Google LLC. For more information, see Google's privacy policy: https://policies.google.com/privacy
- TikTok Ads: An advertising service provided by TikTok. For more information, see TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy?lang=en
h) Use of Goaffpro We use the affiliate marketing tool Goaffpro to carry out online marketing activities. Address: Goaffpro LLC, 505 Montgomery St, 10th Floor, San Francisco, CA 94111, USA. For more information about Goaffpro's privacy policy, please visit: https://www.goaffpro.com/privacy
i) Google Playstore App Google's privacy policy applies to the provision of our app in the Google Play Store. Address: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
j) New law of EU Directive 2021/514 According to EU Directive 2021/514 (DAC-7 Directive), we are obliged to record your income and tax information and submit it to the relevant tax authority in the EU if you as a seller complete over 30 orders or earn over €2000.
4. How we store customer data on the platform
Customer data is stored on secure servers and transmitted in encrypted form. Access to this data is only possible for authorized employees who are obliged to maintain confidentiality.
5. Rights of the data subject
As a user, you have the right to information, correction, deletion, restriction of processing and data portability of your personal data. Please contact us using the contact details provided.
6. Data processing when ordering
When you place an order, the data required for processing is collected and processed. This includes your name, address, payment information and product information.
General information on the legal basis for data processing on this website
If you have consented to data processing, we will process your personal data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR if special categories of data are processed in accordance with Art. 9 Para. 1 GDPR. In the case of express consent to the transfer of personal data to third countries, data processing will also be carried out on the basis of Art. 49 Para. 1 lit. a GDPR. If you have consented to the storage of cookies or to access information on your end device (e.g. via device fingerprinting), data processing will also be carried out on the basis of Section 25 Para. 1 TTDSG. Consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we will process your data on the basis of Art. 6 Para. 1 lit. b GDPR. Furthermore, we process your data if it is required to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR. The relevant legal bases in each individual case are provided in the following paragraphs of this data protection declaration.
Note on data transfer to third countries that are not secure in terms of data protection law and the transfer to US companies that are not DPF-certified
We use tools from companies based in third countries that are not secure in terms of data protection law, as well as US tools whose providers are not certified according to the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data can be transferred to these countries and processed there. We would like to point out that in third countries that are not secure in terms of data protection law, a level of data protection comparable to that in the EU cannot be guaranteed.
We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to that of the EU. Data transfer to the USA is therefore permitted if the recipient has certification under the "EU-US Data Privacy Framework" (DPF) or has suitable additional guarantees. Information on transfers to third countries, including the data recipients, can be found in this data protection declaration.
recipients of personal data
As part of our business activities, we work with various external bodies. In some cases, this also requires the transmission of personal data to these external bodies. We only pass on personal data to external bodies if this is necessary to fulfill a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 (1) (f) GDPR or if another legal basis allows the data to be passed on. When using contract processors, we only pass on our customers' personal data on the basis of a valid contract for order processing. In the case of joint processing, a contract for joint processing is concluded.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARAGRAPH 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING IN SO FAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).
7. Server log files
Every time you access our platform, usage data is stored in so-called server log files. This data includes your IP address, the time of access, the pages accessed and the browser used.
8. Storage period
Personal data will only be stored for as long as it is necessary to fulfil the purposes for which it was collected or as long as statutory retention periods so require.
General information on the legal basis for data processing on this website
If you have consented to data processing, we will process your personal data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR if special categories of data are processed in accordance with Art. 9 Para. 1 GDPR. In the case of express consent to the transfer of personal data to third countries, data processing will also be carried out on the basis of Art. 49 Para. 1 lit. a GDPR. If you have consented to the storage of cookies or to access information on your end device (e.g. via device fingerprinting), data processing will also be carried out on the basis of Section 25 Para. 1 TTDSG. Consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we will process your data on the basis of Art. 6 Para. 1 lit. b GDPR. Furthermore, we process your data if it is required to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR. The relevant legal bases in each individual case are provided in the following paragraphs of this data protection declaration.
recipients of personal data
As part of our business activities, we work with various external bodies. In some cases, this also requires the transmission of personal data to these external bodies. We only pass on personal data to external bodies if this is necessary to fulfill a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 (1) (f) GDPR or if another legal basis allows the data to be passed on. When using contract processors, we only pass on our customers' personal data on the basis of a valid contract for order processing. In the case of joint processing, a contract for joint processing is concluded.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARAGRAPH 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING IN SO FAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).
right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged violation. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request that the data be transferred directly to another responsible party, this will only be done if it is technically feasible.
information, correction and deletion
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, a right to correction or deletion of this data. You can contact us at any time with regard to this and other questions on the subject of personal data.
right to restriction of processing
You have the right to request that the processing of your personal data be restricted. You can contact us at any time to do so. The right to restrict processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the check, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you require it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deleted.
If you have lodged an objection in accordance with Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, these data may - with the exception of storage - only be processed with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Note on data transfer to third countries that are not secure in terms of data protection law and the transfer to US companies that are not DPF-certified
We use tools from companies based in third countries that are not secure in terms of data protection law, as well as US tools whose providers are not certified according to the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data can be transferred to these countries and processed there. We would like to point out that in third countries that are not secure in terms of data protection law, a level of data protection comparable to that in the EU cannot be guaranteed.
We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to that of the EU. Data transfer to the USA is therefore permitted if the recipient has certification under the "EU-US Data Privacy Framework" (DPF) or has suitable additional guarantees. Information on transfers to third countries, including the data recipients, can be found in this data protection declaration.
8) Processing of image files for product personalization
8.1 - Transmission of image files for order processing via an upload function
Our website allows customers to upload image files via an upload function to order personalized products. The uploaded files serve as a template for personalizing the selected product.
The image files are transferred directly and securely via an automated, encrypted data transfer from the device used to us. The files you send are processed, stored and used exclusively for the purpose of creating the personalized product in accordance with the service description on our website.
If specialized service providers are required to implement and process your order, the image files will only be passed on to them. We will inform you explicitly about this in the following paragraphs. The data will not be passed on to other third parties.
If the transmitted files contain personal data (e.g. images of identifiable persons), this data will be processed exclusively to process your order on the basis of Art. 6 Paragraph 1 Letter b of GDPR. After your order has been finally processed, the transmitted image files will be completely and automatically deleted.
9. Use of contact forms from provider profiles
We provide contact forms on our website that you can use to contact us or our providers directly. The use of these forms is voluntary.
The data you enter in the contact form (e.g. name, email address, telephone number and message) will be transmitted to us or the respective provider in encrypted form. This data will be used exclusively to process your request and for the associated purposes.
Your data will only be passed on to third parties if this is necessary to process your request (e.g. to forward it to specialized providers) or if you have expressly given your consent. The legal basis for the processing of your data is Art. 6 Para. 1 lit. b GDPR, provided that the contact is related to the fulfillment of a contract or to the implementation of pre-contractual measures. In all other cases, processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR, based on our legitimate interest in processing inquiries and offering customer service.
The data you submit will be deleted as soon as your request has been processed and there are no legal retention periods.
10. Use of the comment function
If you use the comment function on our website, your comment will be saved and publicly displayed, as well as the time of publication and the name you provided. In addition, your IP address will be recorded to ensure tracking in the event of any legal violations. If necessary, your email address will be saved so that we can contact you, for example if a third party reports your comment as illegal.
It is possible to subscribe to follow-up comments. In this case, you will receive a confirmation email to ensure that the email address provided belongs to you (double opt-in procedure). Your data will be processed for the subscription to comments based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can unsubscribe from follow-up comments at any time for the future. Information on how to unsubscribe can be found in the confirmation email you received after registering.
11. Cookies
We use cookies to improve and analyze the use of our platform. Cookies are small text files that are stored on your device and store information about your use of our platform. We also use cookies for language settings to change the languages in German, English, Japanese and French.
Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.
Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing will take place exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
You can find out which cookies and services are used on this website in this privacy policy.
Payment method:
To process payments on our platform, we use the payment service Stripe, which is provided by Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. When processing payments, personal data may be transmitted to Stripe, including information about the transactions made. Stripe is certified under the EU-US Privacy Shield, which ensures that an adequate level of data protection is guaranteed for the processing of personal data. For more information on Stripe's privacy policy, please visit: https://stripe.com/privacy .
12. Contact form
The contact form on our platform allows you to send us inquiries. The data you enter will be used and stored to process your inquiry.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this was requested; the consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Inquiry by email, telephone or fax
If you contact us by email, telephone or fax, your request, including all personal data resulting from it (name, request), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this was requested; the consent can be revoked at any time.
The data you send to us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected.
13. Austria
When selling items to Austria, we are obliged to collect personal data and transmit it to the Austrian tax authorities:
First and Last Name
user name
E-Mail-Address
Address
Postal code
order numbers
The month in which the transactions were completed
Earned commission
Personal data collected and processed for this purpose will be kept for 10 years from the end of the year in which the transaction (sale of the item) took place.
14. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to our data processing practices or legal requirements. We encourage you to check this page regularly for changes.
15. Contact information
If you have any questions about data protection or would like to exercise your rights as a user of this platform, you can contact us using the following contact details:
Samuel Ruoff
Schelmenwasen 21
72160 Horb am Neckar
Email: support@justslips.com
from 10-26-2024