1 Person responsible

The controller for the processing of your personal data within the meaning of Art. 4 No. 7 GDPR is

Bacto GesbR
Partners authorised to represent: Philipp Reinpold, Alexander Seitz
Gipsmühlstraße 43b
6600 Breitenwang
Telephone: on request
E-mail: info@bacto-clothing.com

 

2 Contact details of the data protection officer

You can reach our data protection officer using the following contact details:

Philipp Reinpold
Gipsmühlstraße 43b
6600 Breitenwang
E-mail: info@bacto-clothing.com

 

3 No obligation / necessity to provide the data

There is no legal or contractual obligation to provide us with your personal data. However, insofar as this results from the following regulations, we may only be able to provide our services to a limited extent or not at all or not be able to conclude a contract with you if you do not provide us with the necessary data. Otherwise, failure to provide your personal data has no consequences.

 

4 Purpose and legal basis of data processing

4.1 Visiting our website
If you visit our website without otherwise providing us with information about the functions we provide, we or our web host only collect the personal data that your browser transmits to us. For this purpose, a log data record (so-called server log file) is created on our web server, which contains the following data

- the so-called referrer URL (the website from which our website was accessed)
- the name and URL of the requested page
- the date and time of your visit
- the time zone difference to Greenwich Mean Time (GMT)
- your IP address (in abbreviated and therefore no longer personally identifiable form)
- the type, language and version of the web browser you are using
- the operating system of your computer
- the amount of data transferred and
- the access status/HTTP status code (notification of whether access was successful)

The legal basis for the collection of this data is Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our legitimate interest lies in the provision of the website, the collection of this data for statistical purposes and ensuring the functionality, stability and security of our website.

Unless we are legally obliged or authorised to store your personal data collected during your visit to our website for longer, the server log files created will be deleted after seven days.

4.2 Processing of enquiries
When you contact us (e.g. by email or via a contact form provided on our website), we process the data you provide for the purpose of responding to and processing your enquiry. If you contact us to initiate or execute a contract, the legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR. If your enquiry is not answered as part of the fulfilment of contractual obligations, your enquiry or the answer to it constitutes our legitimate interest in processing your data. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR.

Unless we are obliged by law to store your data for longer, we will only store your data collected in the course of contacting you until your enquiry has been finally processed and the purpose for storing your data no longer applies.

4.3 Processing of orders
If you wish to place an order with us using the functions offered on our website, it is necessary for you to provide all the personal data that we require to conclude the contract with you and to process your order. Mandatory information required for this purpose is marked as mandatory fields during the ordering process. All other information is voluntary. The legal basis for the processing of your mandatory data collected during the ordering process is Art. 6 para. 1 sentence 1 lit. b GDPR

We may also use the data you provide when placing an order to send you information about similar goods or services from our range by post or email. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR, whereby the purpose of informing you about similar offers represents our legitimate interest.

Due to commercial and tax law requirements, we are obliged to store your data collected in the context of orders for a period of up to ten years. After the expiry of two years or all warranty obligations or other contractual obligations (e.g. software updates), whichever occurs last, we will restrict the processing of your data, i.e. your data will then only be stored to fulfil our statutory retention obligations.

4.4 Use of our newsletter
If you subscribe to our newsletter, you consent to us sending you information about our offers from our product range. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent to receive our newsletter at any time with effect for the future. To do so, you can use the link included in every newsletter. Alternatively, you can also send us your cancellation using the other contact details and channels provided by us. Your cancellation does not affect the legality of the processing of your data by us for the period up to the declaration of cancellation.

5 Transfer of your data to third parties

5.1 Forwarding of your data for payment processing
Depending on the payment method you have selected, your data required for the execution and processing of the payment will be passed on to the corresponding payment service provider. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR. The following applies in detail:

If you select payment via PayPal, your data will be forwarded to PayPal Europe S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg for the purpose of payment processing. If you select payment on account there, PayPal will carry out a credit check beforehand. For the execution of payment on account, we assign our claim against you to PayPal and transmit all data required for this purpose to PayPal. In addition, payment processing via PayPal is subject to their privacy policy, available at: https://www.paypal.com/de/webapps/mpp
/ua/privacy-full?locale.x=en_DE.

If payment is selected as "Klarna-Sofortüberweisung", your data will be forwarded to Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany, to process the payment. In addition, the data protection regulations of Sofort GmbH apply, available at: https://www.sofort.com/payment/wizard/get
CmsContent/data_protection/DE/0/en.

If you choose to pay via Klarna, your data will be forwarded to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, to process the payment. The use of the Klarna invoice payment method requires a prior positive credit check by Klarna. In addition, Klarna's data protection provisions apply, available at: https://cdn.klarna.com/1.0/shared/content
/legal/terms/0/en_en/privacy.

If you choose to pay by credit card, your data will be forwarded to our payment service provider (Shopify Payments) to process the payment, whose privacy policy can be found at: https://www.shopify.com/de/legal/datenschutz.

If you select payment via Apple Pay, your data will be forwarded to Apple Inc, One Apple Park Way, Cupertino, CA 95014, USA, for the purpose of payment processing. Apple's privacy policy also applies, available at: https://www.apple.com/de/legal/privacy
/data/en/apple-pay/.

If you choose to pay via Google Pay, your data will be forwarded to Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, for the purpose of payment processing. The data protection information for Google Payments also applies, available at: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de.

If you choose to pay via Amazon Pay, your data will be passed on to Amazon Payments Europe s.c.a, 38 avenue John F. Kennedy, L-1855 Luxembourg and, if necessary, to Amazon Payments UK Limited, 1 Principal Place, Worship Street, London EC2A 2FA for the purpose of payment processing. The data protection provisions of Amazon Payments Europe, available at: https://pay.amazon.de/help/201212490 and Amazon Payments UK, available at: https://pay.amazon.de/help/201751600, also apply.

5.2 Forwarding of your data to service providers
Depending on the shipping method you have selected, we will pass on your data to the relevant shipping and logistics service provider for the purpose of shipping processing. In addition, we pass on your data as necessary to IT service providers (e.g. email providers), dropshipping providers and other service providers or order processors for order processing. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

If you have expressly consented to this as part of your order, we will pass on your e-mail address to the shipping service provider for the purpose of tracking your shipment. The legal basis for this is Art. 6 para. 1 lit. a GDPR.

 

6 Use of cookies and associated functions/technologies

6.1 We use so-called cookies on our website. These are small text files that are stored on your computer and saved by your browser. Cookies contain characteristic character strings that can be used to uniquely identify your browser when you use our website.

6.2 Since cookies are stored directly on your computer, you can use your browser settings to specify that

- you are informed about the setting of cookies and then only allow this in individual cases
- the setting of cookies is excluded in general or for certain types of cookies
- cookies set on your computer are automatically deleted when you close the browser.

Please note, however, that the functionality and/or full availability of our website may be restricted or not guaranteed if cookies are deactivated.

6.3 Cookies are categorised according to their function and storage duration as follows:

Technically necessary cookies: These are absolutely necessary for the functionality and security of our website and serve the sole purpose of ensuring the basic functions of our website.

Functional cookies: These store various data to facilitate the use of a website or to provide personalised functions (e.g. login data, language selection, etc.).

Performance cookies: These cookies are used to store information about your user behaviour (e.g. duration, frequency and order of pages visited, search terms used, etc.) on a website. They serve the purpose of improving the offer on the website through the collected information and adapting it to the interests of the user.

Marketing cookies: These also store information about your user behaviour on a visited website. However, they are used to display adverts tailored to your individual user interests and to measure their effectiveness.

Sharing cookies: These are used to enable or improve the interactivity of a website with other services (e.g. social networks).

Transient cookies: These cookies are automatically deleted as soon as the browser session ends.

Persistent cookies: These are stored even after the end of your browser session for a specified period or until you delete them yourself in the security settings of your browser.

6.4 Any use of cookies and comparable technologies and the associated processing of your personal data that is not absolutely technically necessary (technically necessary cookies) requires your express and active consent in accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 sentence 1 lit. a GDPR.

6.5 Unless expressly stated otherwise, we only use transient, technically necessary cookies on our website. The legal basis for this is § 25 para. 2 TTDSG and Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our legitimate interest lies in ensuring the basic functions and security of our website.

 

7 Your rights as a data subject

7.1 You have the following rights vis-à-vis us with regard to your personal data:

- in accordance with Art. 15 GDPR, the right to information
- in accordance with Art. 16 GDPR, the right to rectification of your data
- in accordance with Art. 17 GDPR, the right to erasure of your data
- in accordance with Art. 18 GDPR, the right to request the restriction of processing
- in accordance with Art. 20 GDPR, the right to data portability
- pursuant to Art. 21 GDPR, the right to object to processing

7.2 You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us in accordance with Art. 77 GDPR.

 

8 Duration of storage of your data

8.1 Unless otherwise stated in the above provisions, your data will only be stored by us for as long as is necessary to fulfil the stated purpose.

8.2 If the processing of your data is based on consent, it will be deleted immediately after receipt of your cancellation, unless we are legally permitted to continue processing your data on another legal basis.

8.3 If the processing of your data by us is based on a legitimate interest, we will terminate this immediately in the event of your objection to this, unless our legitimate interests in further processing outweigh your interests in its cessation. If we process your data for the purpose of direct marketing, we will cease this immediately upon receipt of your objection.