1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Christian Zapotoczny, WerbeDruckKL, Im Reiserfeld 8d, 67657 Kaiserslautern, Germany, Tel.: +49 631 3660105, Email: info@werbedruckkl.de. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 If you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called 'server log files'). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

- Website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the website
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string 'https://' and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

3.1 Shopify

We use the system of the following provider to host our website and display the page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ('Shopify').

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

When data is transferred to Canada, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) (f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

4) Cookies

To make visiting our website more attractive and enable the use of certain functions, we use cookies, i.e., small text files stored on your device. Some of these cookies are automatically deleted after closing the browser ('session cookies'); others remain on your device for a longer period and enable the storage of page settings ('persistent cookies'). In the latter case, you can find out the storage period from the overview of your web browser's cookie settings.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either to execute the contract, in accordance with Art. 6 (1) (a) GDPR in the case of consent given or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests.

5) Contacting us

When you contact us (e.g., via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after final processing of your request, provided there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account and for contract processing

In accordance with Art. 6 (1) (b) GDPR, personal data is collected and processed if you provide it to us for the purpose of executing a contract or opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the controller’s address mentioned above. We store and use the data you provide for contract processing. After the complete execution of the contract or deletion of your customer account, your data will be blocked with regard to retention periods under tax and commercial law and deleted after expiry of these periods, unless you have expressly consented to further use of your data or we have reserved a further use of data permitted by law.

7) Use of customer data for direct marketing

7.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you regular information about our offers. Mandatory information for sending the newsletter is only your e-mail address. The provision of additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters.

The activation link is sent to the e-mail address you provided. By clicking this link, you confirm your consent.

When you subscribe to the newsletter, we store your IP address and the date and time of subscription in order to trace possible misuse of your e-mail address at a later date.

The data collected when subscribing to the newsletter is used exclusively for advertising purposes by way of the newsletter. You can unsubscribe at any time via the link provided in the newsletter or by sending us a corresponding message. After unsubscribing, your e-mail address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use or we reserve the right to use data beyond this as permitted by law.

Legal basis: Art. 6 (1) (a) GDPR.

8) Data processing for order processing

8.1 To process your order, we work together with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of the payment process, provided this is necessary for payment processing. If payment service providers are used, we explicitly inform you of this below. The legal basis for the data transfer is Art. 6 (1) (b) GDPR.

8.2 Use of payment service providers (payment services)

- Apple Pay: If you choose Apple Pay, payment processing is carried out via Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.
- Google Pay: If you choose Google Pay, payment processing is carried out via Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland.
- PayPal: If you pay with PayPal, credit card via PayPal, direct debit via PayPal, or purchase on account via PayPal, your data will be processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
- Shopify Payments: Payments are processed via Stripe Payments Europe Ltd., Dublin, Ireland.

9) Rights of the data subject

9.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) with respect to the processing of your personal data by the controller, about which we inform you below:

- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

9.2 Right to object

If we process your personal data based on our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future. If you exercise your right to object, we will stop processing the data concerned. Further processing remains reserved if we can demonstrate compelling legitimate grounds for processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes. If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

10) Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal retention period (e.g., retention periods under tax and commercial law). After expiry of this period, the corresponding data is routinely deleted, provided it is no longer necessary for the fulfillment or initiation of the contract and/or we have no legitimate interest in further storage.

 

02.09.2025, 03:41:32 Uhr