Privacy Policy
This privacy policy informs you about the nature, scope and purposes of the processing of personal data when visiting this website, placing orders in our online shop and contacting us.
1. Controller
Holz-Liebling GmbH
Krokusweg 4
83539 Pfaffing
Germany
Phone: +49 (0) 8076 8887094
Email: info@holz-liebling.de
No data protection officer has been appointed. For privacy-related inquiries, please contact us using the contact details above.
The legal bases for data processing are the General Data Protection Regulation (GDPR) and, where applicable, the German Telecommunications Digital Services Data Protection Act (TDDDG).
2. Website Operation, Hosting and Shop System
Our online shop is operated using Shopify. Shopify provides the technical infrastructure required to display the shop, process orders, provide checkout functionality and ensure the security and stability of the website.
In connection with the operation of the website, technical data may be processed, including IP address, date and time of access, browser and device information, requested pages, referrer URL, status codes and similar server log data.
The purposes of this processing are the delivery of the website, operation of the online shop, stability, security, fraud prevention and technical maintenance.
The legal basis is Art. 6(1)(f) GDPR. Where processing is required for order processing or checkout functionality, the legal basis is Art. 6(1)(b) GDPR.
3. Cookies and Consent Management
We use cookies and similar technologies. Technically necessary technologies are used to provide the website, shopping cart, checkout, security functions and basic shop functionality.
For technologies that are not strictly necessary, such as analytics or marketing technologies, we obtain your consent where required. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You can manage or withdraw your consent at any time with effect for the future via the cookie or consent settings provided on this website.
Details about individual technologies, providers and storage periods can be found in the cookie or consent overview displayed on this website, where available.
4. Google Analytics 4
We use Google Analytics 4 to measure reach, analyze website usage, detect errors and improve our online offering.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Processed data may include cookies or similar identifiers, event data such as page views and interactions, approximate location data, device information and browser information. According to Google, IP addresses are not stored in Google Analytics 4.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You can withdraw your consent at any time via the consent settings on this website. You may also use the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout
Data may be transferred to third countries, including the USA. Such transfers may be based on the EU-US Data Privacy Framework, where applicable, and/or Standard Contractual Clauses approved by the European Commission.
Further information: https://policies.google.com/privacy
5. Google Ads, Remarketing and Conversion Tracking
We use Google Ads, remarketing and conversion tracking to display advertisements, measure the effectiveness of advertising campaigns and improve our marketing activities.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
These technologies may process information about website visits, interactions, conversions and, where applicable, device or browser identifiers. If you are logged into a Google account, Google may be able to associate this data with your account depending on your settings.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You can withdraw your consent at any time via the consent settings on this website. Further settings are available at: https://adssettings.google.com/
Data may be transferred to third countries, including the USA, on the basis of the EU-US Data Privacy Framework, where applicable, and/or Standard Contractual Clauses.
Further information: https://policies.google.com/technologies/ads
6. Orders, Customer Account and Contract Processing
When you place an order or create a customer account, we process the data required to process your order and fulfil the contract.
This may include name, billing and shipping address, email address, telephone number, order details, payment information, communication data and customer account data.
The purposes of processing are order handling, delivery, payment processing, invoicing, warranty handling, customer service and fraud prevention.
The legal bases are Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(c) GDPR for legal obligations and Art. 6(1)(f) GDPR for security and fraud prevention.
Commercial and tax-related documents are generally stored in accordance with statutory retention periods, usually for 6 or 10 years.
7. Payment Service Providers
For payment processing, we transmit the data required for payment to the selected payment service provider. Depending on the payment method selected at checkout, the following providers may be involved:
- PayPal, including PayPal Europe S.à r.l. et Cie, S.C.A.
- Stripe, including Stripe Payments Europe Ltd.
The purpose of processing is payment execution, payment confirmation, fraud prevention and, where applicable, identity checks.
The legal basis is Art. 6(1)(b) GDPR. In addition, Art. 6(1)(f) GDPR may apply for fraud prevention and security purposes.
Depending on the provider, data may be transferred to third countries. Such transfers may be based on the EU-US Data Privacy Framework, where applicable, and/or Standard Contractual Clauses.
Please refer to the privacy notices of the respective payment providers for further information.
8. Shipping Service Providers
For the delivery of goods, we transmit the data required for shipping to the respective shipping service provider.
This may include your name, shipping address and, where required for delivery notification or tracking, your email address and telephone number.
The following shipping service providers may be used:
- DHL
- GLS
- Cargoboard
The legal basis is Art. 6(1)(b) GDPR. The purpose is the delivery of your order and, where applicable, shipment tracking.
9. Contact by Form, Email or Telephone
If you contact us by contact form, email or telephone, we process the information you provide in order to respond to your inquiry.
The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract or pre-contractual measures. For general inquiries, the legal basis is Art. 6(1)(f) GDPR.
We store inquiries until they have been fully processed. If the communication relates to a business transaction, statutory retention periods may apply.
10. Recipients and Processors
We use service providers for the operation of the website, shop system, IT infrastructure, payment processing, shipping and related business processes. Where these providers process personal data on our behalf, appropriate data processing agreements are concluded in accordance with Art. 28 GDPR where required.
11. Transfers to Third Countries
When using certain services, personal data may be transferred to countries outside the European Economic Area, in particular to the USA.
Such transfers may be based on an adequacy decision, including the EU-US Data Privacy Framework where the provider is certified, and/or Standard Contractual Clauses approved by the European Commission. Where required, additional safeguards may be used to protect personal data.
12. Obligation to Provide Data
For orders, you must provide the data required for the conclusion of the contract, payment and delivery. Without this data, we cannot process your order.
13. Automated Decision-Making
We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
14. Your Rights
You have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability.
You also have the right to object to processing based on Art. 6(1)(f) GDPR. If processing is based on your consent, you may withdraw your consent at any time with effect for the future.
You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence or at the place of the alleged infringement.
The supervisory authority generally responsible for us is:
Bavarian Data Protection Authority for the Private Sector (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de
15. Updates to this Privacy Policy
We may update this privacy policy if the legal situation, our services or our data processing activities change. The current version is always available on this page.