Privacy Policy - Picknsew

1. Data protection at a glance

Note on the responsible entity

In this privacy policy we explain our handling of your personal data when using www.picknsew.com . Responsible for data protection is Dr. Simon Nieschke, Korsörer Str. 23, 10437 Berlin. Email: hello@picknsew.com .

General information about www.picknsew.com

The following notices provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

Data collection

When you use our offer, we collect certain technical data, also in anonymous form, such as your Internet service provider, Internet browser, operating system, screen resolution, as well as information about the website that led you to us, the number and date of your visits, the average dwell time and the websites visited via us. This data is stored automatically. The evaluation takes place under anonymized or under pseudonymous profiling and exclusively for statistical purposes with the aim of further improving our blog for you. This handling of your personal data to provide our website and is based on our legitimate interest, Art. 6 para. 1 f) GDPR. As part of the necessary balancing of interests, we have weighed up your interest in the respective confidentiality of your personal data and our interests in the provision and improvement of this website. Their interest in secrecy takes a back seat. We could not otherwise provide or develop this website for you.

We also process the personal data that you provide to us, in each case only for the purpose to which you have consented there, such as the purchase of goods or the sending of our newsletter with information about our blog and about the offers of our partners. The legal basis is your consent, Art. 6 para. 1 a) GDPR. You can revoke your consent at any time with effect for the future.

Transfer of your data to third parties

Data is only transferred to authorities and other public institutions within the framework of mandatory legal provisions; the legal basis is, for example, Art. 6 Para. 1 c) GDPR. Insofar as we use service providers to provide our services, such as hosting services or other IT service providers, we protect your personal data through the corresponding legally provided measures, such as order processing contracts.

2. External hosting and content delivery networks (CDN)

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO). Our hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

3. General notes and mandatory information

Privacy

The protection of personal data is a matter of concern to us. Personal data: any information relating to an identified or identifiable natural person. We comply with applicable data protection law, in particular the requirements of the General Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).

We only process your personal data if we have your consent or if a legal regulation permits the processing.

We would like to point out that data transmission on the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of the data against access by third parties is not possible.

Note on data transfer to the USA

Among other things, tools from companies based in the USA are integrated on our website. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. U.S. companies are obliged to hand over personal data to security authorities without you, the data subject, being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

Data storage

Your data will only be stored for as long as is necessary for the purposes stated in this privacy policy or for as long as we are legally or otherwise obligated to store it.

Information, correction, deletion

You have the right to receive information about your personal data stored by us free of charge at any time. If your data is incorrect or wrongly stored by us, we will gladly correct, block or delete it. We ask you to inform us immediately of any changes to your data.

Under the GDPR, everyone has a right of access to their personal data under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to data portability under Article 20 GDPR and a right to object under Article 21 GDPR. In addition, you have the right to lodge a complaint with the competent body in accordance with Article 77 DSGVO in conjunction with 19 BDSG.

For questions, complaints or suggestions or to assert your rights, please contact hello@picknsew.com or use the contact options provided in the imprint.

RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

4. Data collection on this website

Cookies

Our Internet pages use so-called “cookies”. Cookies are small text files and do not harm your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted after the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services). Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.

Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 para. 1 lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a DSGVO); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When cookies are disabled, the functionality of this website may be limited.

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the framework of this data protection declaration and, if necessary, request your consent.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Contact form

If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact data you enter there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, provided that your request is related to the performance of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) f DSGVO) or on your consent (Art. 6 (1) a DSGVO) if this has been requested.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

Request by e-mail or phone

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not share this data without your consent.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Comment function on this website

For the comment function on this page, in addition to your comment, information on the time of creation of the comment, your e-mail address and, if you do not post anonymously, the username you have chosen will be stored.

Storage of the IP address:
Our comment function stores the IP addresses of users who post comments. Since we do not check comments on this website before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.

Subscribe to comments:
As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the info mails. The data entered in the context of subscribing to comments will be deleted in this case; however, if you have transmitted this data to us for other purposes and at another point (e.g. newsletter order), this data will remain with us.

Comments storage period:
The comments and the associated data (e.g. IP address) are stored and remain on this website until the commented content has been completely deleted or the comments have to be deleted for legal reasons (e.g. offensive comments).

Legal basis:
The storage of comments is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke any consent you have given at any time. For this purpose, an informal message by email to us is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

5. Data processing for order processing

In order to process your order, we work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

Use of payment service providers (payment services):

– Paypal

In case of payment via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”) within the framework of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal. For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 para. 1 lit. f DSGVO on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit assessment with regard to the statistical probability of non-payment to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. Further information on data protection, including information on the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

– Payment by Visa, Mastercard and American Express

If you make the payment by credit card, the payment processing is done by the payment provider “Stripe”. The data required for this (card number, validity and verification number) are forwarded to the payment provider in encrypted form and cannot be viewed by the website operator. Stripe Payments Europe Ltd is Industry Data Security Standard (PCI DSS) certified and is subject to the Safe Harbour Agreement. The payment provider transfers, processes and stores, if necessary, personal data outside the EU that are required to process the payment. Stripe is solely responsible for the processing of this data.

Stripe Payments Europe Ltd

Block 4, Harcourt Centre
Harcourt Road
Dublin 2
Ireland

For details on payment with Stripe, please refer to the general terms and conditions and the data protection regulations of the payment provider at: https://stripe.com/de/terms

6. Social media

Third-party social media plug-ins and analytics tools

Google Analytics plugins

We use the analysis tool Google Analytics from Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

Google Analytics uses the information generated by cookies (see “Cookies” above) about your use of this website and is usually transferred to a server in the USA and stored there. This website uses Google Analytics with the code “anonymizeIp” to ensure anonymous collection of IP addresses (so-called IP masking). Your IP address is shortened by Google in member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and only shortened there. Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services associated with website use. The IP address transmitted by Google Analytics is not merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.htmlbzw. at https://www.google.de/intl/de/policies/. More information on the handling of user data at Google Analytics can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

You can prevent Google from processing the data generated by the Google cookie and related to your use of the website by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Facebook Plugins (Like & Share button)

Plugins of the social network Facebook are integrated on this website. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries.

You can recognize the Facebook plugins by the Facebook logo or the “Like” button (“Like”) on this website. You can find an overview of the Facebook plugins here:
https://developers.facebook.com/docs/plugins/?locale=de_DE.

When you visit this website, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited this website with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of this website on your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find more information on this in Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation.

If you do not want Facebook to be able to associate your visit to this website with your Facebook user account, please log out of your Facebook user account.

The use of Facebook plugins is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in ensuring the greatest possible visibility in social media. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Instagram plugin

Functions of the Instagram service are integrated on this website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in ensuring the greatest possible visibility in social media. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

For more information, please see Instagram’s privacy policy: https://instagram.com/about/legal/privacy/ .

Pinterest plugin

On this website, we use social plugins of the social network Pinterest, which is operated by Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”).

When you visit a page that contains such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to the Pinterest server in the USA. This log data may include your IP address, the address of websites you visit that also contain Pinterest features, browser type and settings, date and time of request, how you use Pinterest, and cookies.

Further information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights and options for protecting your privacy, can be found in Pinterest’s Data Protection Notice: https://policy.pinterest.com/de/privacy-policy.

7. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remain unaffected by this.

After you have unsubscribed from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

Newsletter dispatch by third party

This website uses Brevo (formerly SendinBlue) for sending newsletters. Provider is:

Sendinblue SAS
106 boulevard Haussmann
75008 Paris, France

Brevo is a service that can be used to organize and analyze newsletter distribution. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) will be stored on Brevo’s servers.

Our newsletters sent with Brevo allow us to analyze the behavior of newsletter recipients. Here, among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. All links in the e-mail are so-called tracking links that can be used to count your clicks.

If you do not want Brevo to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also revoke your consent at any time with effect for the future by sending an e-mail to the address given in our imprint.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Brevo after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

For further details, please see the Brevo Privacy Policy at: https://de.sendinblue.com/legal/privacypolicy/.

8. Plugins and tools

This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode causes YouTube not to store information about visitors to this website before they watch the video. The transfer of data to YouTube partners, on the other hand, is not necessarily excluded by the extended data protection mode. Thus, YouTube – regardless of whether you watch a video – connects to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts.

If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de .