PRIVACY POLICY

The following data protection declaration applies to the use of our online offer [www .tashay.de] (hereinafter “website”). We give great importance to data protection. The collection and processing of your personal data takes place in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to offer you the aforementioned portal. This declaration describes how and for what purpose your data is collected and used and what options you have in connection with personal data. By using this website you consent to the collection, use and transfer of your data in accordance with this data protection declaration.

The person responsible for data processing is:

Adriana Castillo
Käthchen-Paulus-Straße 6
Frankfurt am Main
Germany
info@tashay.de

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our websites without giving any personal information. Each time a website is accessed, the web server automatically saves only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and the improvement of our offer. This serves to safeguard our legitimate interests, which are predominant in the context of a balancing of interests, in the correct presentation of our offer in accordance with Art. 6 sec. 1 S. 1 lit. f GDPR. ll access data will be deleted no later than seven days after the end of your page visit.

Hosting

The services for hosting and displaying the website are partly provided by our service providers in the course of processing on our behalf. Unless otherwise explained in the context of this data protection declaration, all access data as well as all data collected in the forms provided for this purpose on this website will be processed on their servers If you have any questions about our service providers and the basis of our cooperation with them, please contact us at the contact option described in this Privacy Policy.

2. Data processing for contract processing, contacting and opening a customer account

We collect personal data if you voluntarily provide it to us as part of your order or when you contact us (eg via contact form or e-mail). Mandatory fields are marked as such, as in these cases we absolutely need the data for the execution of the contract or for the processing of your contact and you cannot send the order or the contact without their indication. The data collected can be seen from the respective input forms. We use the data you provide to process the contract and process your inquiries in accordance with Art. 6 1 S. 1 lit. b GDPR. Insofar as you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening the customer account. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this Privacy Policy. After the complete execution of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Art. 6 sec. 1 p. 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 sec. 1 S. 1 lit. a GDPR or we reserve the right to use data beyond that. , which is permitted by law and about which we inform you in this statement. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account.

3. Data processing for the purpose of shipping processing

In order to fulfill the contract in accordance with Art. 6 se 1 p. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

4. Data processing for payment processing

When processing payments in our online shop, we cooperate with these partners: payment service providers

4.1 Data processing for transaction processing

Depending on the payment method selected, we pass on the data necessary for the processing of the payment transaction to our technical service providers, who work for us in the context of order processing, or to the commissioned credit institutions or to the selected payment service provider , insofar as this is necessary for the processing of the payment. his serves the fulfillment of the contract in accordance with Art. 6 sec 1 S. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for the processing of the payment themselves, eg on their own website or via a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies. If you have any questions about our payment processing partners and the basis of our cooperation with them,

4.2 Data processing for the purpose of preventing fraud and optimizing our payment processes

If necessary, we provide our service providers (see the previous paragraph) with additional data that they use together with the data necessary for the processing of the payment as our processors for the purpose of preventing fraud and optimizing our payment processes (eg invoicing, processing of contested payments, support of accounting). In accordance with Art. 6 sec 1 S. 1 lit. f GDPR, this serves to safeguard our overriding legitimate interests in our protection against fraud or in efficient payment management.

4.3 Identity and credit check when selecting Klarna payment services

Klarna Pay now (direct debit)

If you opt for the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we ask for your consent in accordance with Art. 6 sec 1 S. 1 lit. a GDPR that we may transmit to Klarna the data necessary for the processing of the payment and an identity and credit check. In Germany, the business information agencies mentioned in Klarna’s data protection declaration can be used for identity and credit assessment. The information obtained on the statistical probability of a default is used by Klarna for a balanced decision on the establishment, implementation or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option mentioned in this privacy policy. As a result, we may no longer be able to offer you certain payment options.

5. Advertising by e-mail

E-mail newsletter with registration

When you subscribe to our newsletter, we use the data required or separately provided by you to regularly send you our e-mail newsletter on the basis of your consent in accordance with Art. 6 se 1 p. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time and can be done either by sending a message to the contact option described in this privacy policy or via a dedicated link in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use any further data, which is permitted by law and about which we inform you in this declaration.

6. Cookies and other technologies

General information

In order to make your visit to our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, ie after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies). We use such technologies that are strictly necessary for the use of certain functions of our website (eg shopping cart function). These technologies collect and process IP address, time of visit, device and browser information as well as information about your use of our website (eg information on the contents of the shopping cart). This serves within the framework of a balance of interests of overriding legitimate interests in an optimized presentation of our offer in accordance with Art. 6 sec. 1 S. 1 lit. f GDPR. We also use technologies to fulfill the legal obligations to which we are subject (eg to demonstrate consent to the processing of your personal data) as well as to web analysis and online marketing. For more information, including the legal basis for data processing, please refer to the following sections of this Privacy Policy. The cookie settings for your browser can be found at the following links: Microsoft Edge ™ / Safari ™ / Chrome ™ / Firefox ™ / Opera ™ Insofar as you have consented to the use of the technologies in accordance with Art. 6 sec 1 p. 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy or

7. Use of cookies and other technologies for web analysis and advertising purposes

Insofar as you have given your consent in accordance with Art. 6 sec 1 S. 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. After the use of the respective technology has been used by us, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. For more information about your withdrawal options, see the “Cookies and other technologies” section. For more information, including the basis of our collaboration with each vendor, see each technology. If you have any questions about the providers and the basis of our cooperation with them, please contact the contact information described in this Privacy Policy.

7.1 Use of Google services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google Technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision from the European Commission for the United States. Our cooperation is based on standard data protection clauses from the European Commission. If your IP address is collected via Google technologies, it will be truncated by activating IP anonymization before being stored on Google’s servers. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. Unless otherwise stated in the individual technologies, the data processing is carried out on the basis of an agreement concluded for the respective technology between jointly responsible persons in accordance with Article 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website) from which user profiles are created using pseudonyms. Cookies can be used for this purpose. Your IP address will not be merged with other data from Google. The data processing is based on an agreement on order processing by Google.

Google Fonts

For the uniform presentation of the contents on our website, data (IP address, time of visit, device and browser information) are collected by the script code “Google Fonts”, transmitted to Google and then processed by Google. We have no influence on this subsequent data processing.

7.2 Use of Facebook services

Use of Facebook Pixel

We use the Facebook Pixel as part of the facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”) technologies shown below. The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as a visit to a website or newsletter registration), from which user profiles are created using pseudonyms. For this purpose, a cookie is automatically set by the Facebook Pixel when you visit our website, which automatically allows your browser to be recognizable when visiting other websites by means of a pseudonymous CookieID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalized and group-based advertising. We have no influence on the data processing by Facebook and receive statistics created only on the basis of Facebook Pixel. The information automatically collected by the Facebook technologies about your use of our website is usually transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision from the European Commission for the United States. Our cooperation is based on standard data protection clauses from the European Commission. The data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 GDPR. Further information about the data processing by Facebook can be found in Facebook’s privacy policy.

7.3 Other providers of web analysis and online marketing services
8. Social media
8.1 Social plugins from Facebook, Instagram, Pinterest, Whatsapp

Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that no connection to the servers of the respective provider is established when accessing our website. Click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can, for example, press the Like or Share button.

8.2 Our online presence on Facebook, Instagram, Youtube, Pinterest, LinkedIn

Insofar as you have given your consent to this in accordance with Art. 6 sec 1 S. 1 lit. a GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the above-mentioned social media, from which user profiles are created using pseudonyms. These can be used, for example, to display advertisements inside and outside the platforms that are presumed to be in your interests. Cookies are usually used for this purpose. The detailed information on the processing and use of the data by the respective social media operator as well as a contact option and your rights in this regard and setting options for the protection of your privacy, please refer to the data protection notices of the providers linked below. If you still need help with this, you can contact us. Facebook is an offer of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”) The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually transmitted to and stored on a Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA server. There is no adequacy decision from the European Commission for the United States. Our cooperation is based on standard data protection clauses from the European Commission. The data processing in the context of the visit of a Facebook fan page is carried out on the basis of an agreement between joint controllers in accordance with Article 26 GDPR. For more information (information about Insights data), click here. Instagram is an offer of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”) The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is usually transmitted to and stored on a facebook , Inc., 1601 Willow Road, Menlo Park, California 94025, USA server. There is no adequacy decision from the European Commission for the United States. Our cooperation is based on standard data protection clauses from the European Commission. The data processing in the context of the visit of an Instagram fan page is carried out on the basis of an agreement between joint controllers in accordance with Article 26 GDPR. For more information (information about Insights data), click here. YouTube is an offer of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is usually transmitted to a Google LLC server, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision from the European Commission for the United States. Our cooperation is based on standard data protection clauses from the European Commission. Pinterest is an offer of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). The information automatically collected by Pinterest about your use of our online presence on Pinterest is usually transferred to and stored on a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. There is no adequacy decision from the European Commission for the United States. Our cooperation is based on standard data protection clauses from the European Commission. LinkedIn is an offer of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn about your use of our online presence on Pinterest is usually transferred to and stored on a LinkedIn Corporation server, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. There is no adequacy decision from the European Commission for the United States. Our cooperation is based on standard data protection clauses from the European Commission.

9. Contact options and your rights

As a person concerned, you have the following rights: in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein; pursuant to Art. 16 GDPR, the right to request without delay the correction of inaccurate or complete your personal data stored by us; pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is to exercise the right to freedom of expression and information; to fulfill a legal obligation; for reasons of public interest or is necessary to assert, exercise or defend legal claims; in accordance with Article 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you; the processing is unlawful, but you refuse to delete it; we no longer need the data, but you need it to assert, exercise or defend legal claims, or You have objected to the processing in accordance with Article 21 GDPR; pursuant to Article 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; the right to complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office. If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of consents or opposition to a specific use of data, please contact us directly via the contact details in our imprint.

Right to object

In so far as we process personal data as explained above in order to safeguard our legitimate interests, which are predominant in the context of a balancing of interests, you may object to this processing with effect for the future. f the processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. In so far as the processing takes place for other purposes, you are only entitled to object if there are reasons arising from your particular situation. After exercising your right to object, we will not process your personal data for these purposes, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims . This does not apply if the processing is carried out for the purposes of direct marketing. We will not process your personal data for this purpose. Privacy Policy created with the Trusted Shops Legal Texter in cooperation with FÖHLISCH Lawyers.