Privacy policy



We, [Stefan Stanic, Gänsacker 2, 5070, Frick Ort], operate the website [URL: https://www.stevenkerum.store/] and are the provider of the [clothing] offered on the website. We are subsequently deemed to be responsible for the collection, use and processing of your data.



In the following, we will show you whether and how we process your data:



Data processing, storage, deletion

We only process the personal data that we collect directly via our website, the associated applications, via external platforms, via so-called "landing pages" and/or as part of the business relationship with our customers and other business partners. Processing only takes place with your consent or if there is a corresponding legal basis.

Within the scope of the consent you have given, we will only process your data within the limits of this consent, unless one of the following legal bases applies. We expressly point out that you can revoke your consent at any time, whereby a processing action that has already taken place - lawfully - is not affected by the revocation.

The following legal bases come into question:

Consent of the data subject;
Fulfillment of the contract with the data subject as a contracting party or necessary pre-contractual measures at the request of the data subject
Fulfillment of necessary legal obligations of our company;
Performance or exercise of a task carried out in the public interest;
Legitimate interests of our company, provided that the interests of the data subject or their fundamental rights do not prevail.


The personal data collected will be deleted as soon as we no longer need it for the stated purpose or the purpose of storage no longer applies. However, data must be stored if the Swiss or European legislator stipulates a corresponding obligation. Such obligations exist, for example, in contract and tax law or may result from the provisions on commercial accounting: Business documents, contracts or accounting vouchers are subject to a retention period of 10 years. This data, which also includes personal data, will be blocked if we no longer need it to provide our services. We use it exclusively for accounting and tax purposes.



Disclosure to third parties

In the course of order processing, it may be necessary to use the services of third parties. In this case, it may be necessary to pass on data to these external service providers in order to provide services in accordance with the contract. The legal basis for passing on data is identical to the legal basis for lawful processing and can be viewed under Section 1. In any case, we contractually ensure that the third parties commissioned to process your data comply with the data protection requirements. Finally, under certain circumstances we may also be obliged by official or court order to disclose data to third parties or government agencies.



Provision of our services and creation of log files

As soon as you access our website, our system automatically collects and stores information in log files. This information includes

Browser type and version
operating system
IP address
Internet service provider
Date and time


The aforementioned data cannot be directly assigned to a person. The data collected and stored in this way is not merged and stored with other personal data, but is stored in our system. The legal basis for the collection and storage in log files is the legitimate interests of our company.



Storage in log files serves exclusively to ensure the functionality of our services. In addition, this supports the optimization of our services and ensures the security of our information technology systems. The log files are automatically deleted after each session.



The collection of your data and its storage in log files is absolutely necessary for the operation of our website; there is no possibility of objection.



Cookies

We use cookies on our website. These are small text files that your browser stores on your computer (in the corresponding browser folder or under the program data). This enables your browser to be uniquely identified when you return to our website. The display settings and login information are stored and transmitted in the cookies. We use cookies for the user-friendly and secure design of our website. The legal basis is the legitimate interests of our company.



Due to the fact that cookies are stored on your computer system, you have full control over their use. You can deactivate or restrict the transmission of cookies using your browser settings. You can also delete stored cookies at any time via your browser settings; this can also be done automatically. We would like to point out that deactivating cookies may mean that you can no longer use all the services on our website.

Instagram

We use Instagram social plug-ins on our website from the company of the same name, Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. You can recognize the corresponding plug-ins by the Instagram logo or the "camera" button on our website. As soon as you visit our website, the respective plug-in creates a connection from your browser to the Instagram server. Regardless of whether you are logged in to Instagram or whether you even have a corresponding account, Instagram receives the information that you have visited our website with your IP address. This information is stored on the aforementioned server in the USA. If you are logged in to Instagram while visiting our website, Instagram can assign your visit to your profile.



Information regarding the purpose and scope of the respective data collection, the further processing and use of your data by Instagram as well as your rights and setting options can be found in Instagram's respective data protection information: https://help.instagram.com/155833707900388.



If you do not want Instagram to be able to assign the data collected on our website directly to your account, you must log out of Instagram before accessing our website. You can also completely prevent the Instagram plug-ins from loading with an add-on for your browser.

Contact form


The information you send us is used solely to process your request/message. By sending the request/message, you consent to the data processing described (legal basis: consent). You can revoke your consent at any time, whereby processing that has already taken place is not affected by the revocation.

Shopify

For our online store, we use Shopify from the company of the same name Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify can also process the data in the USA, among other places.



The legal basis for the use of Shopify is your consent as a data subject. In addition, we have a legitimate interest in the use of Shopify; this serves to optimize and ensure the security of our online offering. The basis for data processing and data transfer to the USA are so-called standard contractual clauses (see Art. 46 para. 2 and para. 2 GDPR). Through these clauses, Shopify undertakes to comply with applicable European law and the level of data protection. This also applies if the data is processed in a third country, such as the USA.



Further information about Shopify: https://www.shopify.de/legal/datenschutz.

TikTok

On our website, we use so-called social plug-ins from TikTok from the Chinese company of the same name TikTok with its European branch TikTok Technology Limited in 2 Cardiff Lane Grand Canal Dock, Dublin 2, D02 E395. You can recognize the corresponding plug-ins by the TikTok logo. As soon as you visit our website, the respective plug-in creates a connection from your browser to the TikTok server. Regardless of whether you are logged in or whether you even have a corresponding account, TikTok receives the information that you have visited our website with your IP address. This information may be stored on servers outside of Europe (USA, China).



This information is stored on the aforementioned server in the USA. If you are logged in to TikTok while visiting our website, TikTok can assign your visit to your profile.



Further information on the standard contractual clauses and/or the data that TikTok processes can be found at: https://ads.tiktok.com/i18n/official/policy/controller-to-controller and https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.

WhatsApp

On our website and for the provision of our services, we use the WhatsApp instant messaging service of the company of the same name, WhatsApp Inc. In Europe, the following company is responsible: WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, D02 KH28, Ireland. WhatsApp Inc. is an American company and the subsidiary of Meta Platforms Inc.



We would like to point out that WhatsApp may process your data in the USA, among other places. The legal basis for the use of WhatsApp is the consent of the data subject (Art. 13 para. 1 FADP or Art. 6 para. 1 lit. a GDPR). The basis for data processing and data transfer to the USA are so-called standard contractual clauses (see Art. 46 para. 2 and para. 2 GDPR). Through these clauses, WhatsApp undertakes to comply with the applicable European law or level of data protection. This applies even if data is processed in a third country, such as the USA.



Further information on data transfer (under the standard contractual clauses) can be found at: https://www.whatsapp.com/legal/business-data-transfer-addendum-20210927. Further information can also be found at: https://www.whatsapp.com/privacy.

YouTube

We use YouTube social plug-ins on our website from the company of the same name, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. You can recognize the corresponding plug-ins by the YouTube logo on our site.



As soon as you visit our website, the respective plug-in creates a connection from your browser to the YouTube server. Regardless of whether you are logged in to YouTube or whether you even have a YouTube account, YouTube receives the information that you have visited our website with your IP address. This information is stored on servers in the USA. If you are logged in to YouTube while visiting our website, the platform creates an identifier/connection with your YouTube account.



YouTube therefore also processes the data in the USA. The basis for data processing and data transfer to the USA are so-called standard contractual clauses. Through these clauses, YouTube undertakes to comply with applicable European law and the level of data protection. This also applies if the data is processed in a third country, such as the USA.



Please note that YouTube may use this information for the purposes of advertising, market research or for other purposes such as customizing the advertisements displayed; we have no influence over this. If you do not wish your account to be associated with YouTube, please log out of your YouTube account before visiting our website. You can find further information on this in YouTube's privacy policy: https://policies.google.com/privacy.



Right to information

As a data subject, you can request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have the right to the following information



The purposes for which the personal data is processed;
The categories of personal data being processed;
The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
the envisaged period for which the personal data concerning you will be stored, or, if not possible, the criteria used to determine that period
the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
The existence of a right to lodge a complaint with a supervisory authority;
All available information about the origin of the personal data that was not collected from you
The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.


You also have the right to request information as to whether personal data concerning you is transferred to a third country or an international organization; in this case, you have the right to be informed of the appropriate guarantees in connection with the transfer.



Right to rectification and erasure

You have the right to obtain from us without undue delay the rectification and/or completion of inaccurate and/or incomplete personal data concerning you.



You also have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies:



The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
You withdraw your consent and there is no other legal basis for the processing;
You object to the processing on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing or you object to the processing for direct marketing purposes;
The personal data concerning you has been processed unlawfully;
The deletion of your personal data is necessary to fulfill a legal obligation;
the personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR


Right to restriction of processing

As the data subject, you have the right to request the restriction of processing if one of the following conditions is met



The accuracy of the personal data is contested. The restriction may be requested for a period enabling us to verify the accuracy of the personal data;
The processing is unlawful and you request the restriction of processing instead of erasure;
We no longer need the personal data for processing purposes, but you need it for the establishment, exercise or defense of legal claims;
You object to the processing.


If the processing of personal data concerning you is restricted, we may, with the exception of storage, only process the data with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of public interest.



If you have obtained a restriction of processing in accordance with the aforementioned conditions, you will be informed by us before this restriction is lifted.



Information and obligation to notify third parties

If we have made the personal data concerning you public and we are obliged to delete it, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the data controller and/or the processors of the personal data that you have requested the deletion of the personal data concerning you.



We will inform all recipients whose personal data has been disclosed of any rectification or erasure of the personal data and any restrictions on processing, unless this proves impossible or involves disproportionate effort.



Exceptions to the right to erasure

The right to erasure does not apply if the processing is necessary to exercise the right to freedom of expression and information and/or to assert, exercise and/or defend legal claims.



Right to data portability

You - as the data subject - have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us to which the personal data have been provided, where the processing is based on consent or on a contract and the processing is carried out by automated means.



You also have the right to obtain that the personal data concerning you be transmitted directly by us to another controller, insofar as this is technically feasible. This must not adversely affect the rights and freedoms of other persons.



Right to object

You - as the data subject - have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. An additional exception is processing for the establishment, exercise or defense of legal claims.



If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing for the purpose of such marketing. If you object to the processing for the aforementioned purpose, we will no longer use your personal data for this purpose.



You have the right to withdraw your consent at any time. This revocation does not affect the lawfulness of the - lawful - processing that has already taken place.



Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular at your place of residence (EU/CH), your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR or the FADP.



The competent authority for Switzerland is: Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Bern



The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.





[Stefan Stanic], [January] [2024]