Legal

Privacy Policy

Information on the processing of your personal data

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is given in the processing operations below. "Personal data" means all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information. Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. Processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering.

Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision.

Web Hosting by Netlify

Our website is hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, California 94104, USA; "Netlify"). When our website is accessed, Netlify automatically stores information in server log files that your browser transmits. This includes: IP address, date and time of access, requested URL, referrer URL, browser and operating system used, and amount of data transferred. This processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in providing our website securely, quickly, and reliably.

As Netlify is a US-based company, your data may be transferred to the USA. Netlify is certified under the Trans-Atlantic Data Privacy Framework (TADPF) for which the EU Commission has issued an adequacy decision. In addition, Netlify uses Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. For more information, please visit: netlify.com/privacy

Contact

The controller responsible for data processing is:
Tommy Muhr
Fürtherstraße 54
90429 Nuremberg
Germany
Phone: +49 176 70732676
Email: Service@evomond.com

Customer Contact by Email

If you contact us by email on your own initiative for business purposes, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves the purpose of processing and responding to your enquiry. If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. If the contact is made for other reasons, this processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest. In this case, you have the right to object to processing at any time. Your email address is only used to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing.

Collection and Processing When Using the Contact Form

When using the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. Processing is done for the purpose of making contact. If contact serves to carry out pre-contractual measures or concerns an existing contract, processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, it is carried out on the basis of Art. 6(1)(f) GDPR. You have the right to object at any time. Your data will be deleted in compliance with statutory retention periods.

Use of Google Maps API Address Validation

We use the address validation service of Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, "Google") on our website. Processing serves to check your entries in our address forms in real time for input and spelling errors and to supplement any missing data. For this purpose, address data you enter is transmitted to the provider, stored and evaluated. Your data may also be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists (Trans-Atlantic Data Privacy Framework, TADPF). Google has certified under the TADPF. Processing is carried out on the basis of Art. 6(1)(f) GDPR. You have the right to object at any time. More information: cloud.google.com/maps-platform/terms

Customer Account & Orders

When opening a customer account, we collect your personal data to the extent indicated. Processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time. Your customer account will then be deleted.

When placing an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and handle your enquiries. Processing is carried out on the basis of Art. 6(1)(b) GDPR. Your data may be passed on to shipping companies, payment service providers, and IT service providers. The scope of data transfer is limited to a minimum.

Reviews

After your purchase, we may ask you to rate your purchase with us. For this purpose, we use your personal data (name, email address, order information) to send you a review reminder by email after a completed order, provided you have expressly consented. Processing is carried out on the basis of Art. 6(1)(a) GDPR. You can revoke your consent at any time.

Payment Service Providers

Use of PayPal / PayPal Checkout

We use the payment service PayPal of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). Processing serves the purpose of enabling payment via the payment service. With the selection and use of PayPal, the data required for payment processing is transmitted to PayPal. Processing is carried out on the basis of Art. 6(1)(b) GDPR. All PayPal transactions are subject to the PayPal Privacy Statement: paypal.com – Privacy Policy

Use of Payment Service Provider Stripe

We use the payment service Stripe of Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). With the selection and use of Stripe, the data required for payment processing is transmitted to Stripe. Processing is carried out on the basis of Art. 6(1)(b) GDPR. All Stripe transactions are subject to the Stripe Privacy Policy: stripe.com/en/privacy

Use of Google Ads (Google Advertising)

We use the online advertising service Google Ads of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). Google Ads allows us to display advertisements in Google search results and on third-party websites when users search for terms relevant to our offering. When a user reaches our website via a Google advertisement, a conversion tracking cookie is set. Data processed may include: whether you arrived via an advertisement, date and time, search terms, and geographic information. This processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent, which you grant via the cookie banner. Your data may be transferred to the USA, for which an adequacy decision of the EU Commission exists (TADPF). Google is certified under the TADPF. You can withdraw your consent at any time with effect for the future by changing your cookie preferences via the banner at the bottom of the page. For more information: policies.google.com/privacy

Cookies

Our website uses cookies. Cookies are small text files stored in or by your internet browser on your computer system. You have full control over the use of cookies. Through the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide on a case-by-case basis and prevent the storage of cookies. Cookies already stored can be deleted at any time.

Information on managing cookies in the main browsers:

Technically Necessary Cookies

We only use technically necessary cookies to make our offering more user-friendly, effective and secure. The use of cookies or comparable technologies is carried out on the basis of § 25(2) TDDDG. Processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring optimal website functionality.

Analytics

Use of Google Analytics 4

We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). Processing serves the purpose of analysing this website and its visitors, as well as for marketing and advertising purposes. Among other data, the following information may be collected: IP address, date and time of page view, click path, browser and device information, pages visited, referrer URL, location data, purchase activities. Your IP address is truncated by us on our own servers beforehand. Processing is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can revoke your consent at any time. The TADPF adequacy decision applies for the USA. More information: policies.google.com/privacy

Plug-ins and Other Services

Use of Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). This application manages JavaScript tags and HTML tags used to implement tracking and analytics tools. The Google Tag Manager itself does not store cookies and does not process personal data directly.

Use of Social Plug-ins

We use plug-ins from social networks on our website. The integration and the resulting data processing serve the purpose of optimising advertising for our products. The use of cookies or comparable technologies is carried out with your consent on the basis of § 25(1)(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

  • Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland): Privacy Policy. Data may be transferred to the USA (TADPF).
  • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland): Privacy Policy. Data may be transferred to the USA (TADPF).
  • X (formerly Twitter) (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA): Privacy Policy. Data may be transferred to the USA (TADPF).

Data Subject Rights and Retention Period

Retention Period

After complete contract processing, data is first stored for the duration of the warranty period, then taking into account statutory retention periods (particularly tax and commercial law), and deleted after the period expires, provided you have not consented to further processing.

Rights of the Data Subject

Where the statutory requirements are met, you have the following rights under Arts. 15–20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability. You also have the right to object under Art. 21(1) GDPR to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint

You have the right under Art. 77 GDPR to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
Tel.: +49 981 1800930
Email: poststelle@lda.bayern.de

Right to Object

If the personal data processing listed here is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to these processing activities at any time with effect for the future on grounds relating to your particular situation. After the objection has been lodged, processing of the relevant data will be terminated, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Last updated: 22.10.2024