I. General information and legal bases

The following declaration informs you about what type of personal data is collected for what purpose on this website by us as the responsible body and to what extent this data is made accessible to third parties.

  1. Responsible body:
    proud2craft GmbH
    Oberer Ahlenbergweg 19 d
    58313 Herdecke
    Germany
    Email: shop@proud2craft.com
    Telephone: +49 (0) 7643 3330 – 0
  2. Legal bases of processing
    The processing of personal data requires a legal basis, which we would like to present to you below. When processing personal data for which we obtain the consent of the person concerned, Article 6 Paragraph 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. Article 6 paragraph 1 lit. b GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. This also includes processing operations that are necessary to carry out pre-contractual measures. Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 lit. c GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 Paragraph 1 lit. f GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the conduct of our business activities and in the analysis, optimization and maintenance of the security of our online offer.

 II. Log Files, Hosting

The server statistics automatically store data that the browser transmits to us as part of our legitimate interest in analysis and for security reasons (so-called "log files"). In detail, this is the following data:

  • Browser software language and version
  • operating system used and its interface
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer (IP address)
  • Date and time of the server request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • amount of data transferred
  • Access status/ HTTP status code
As a rule, we cannot assign this data to specific persons. This data is not merged with other data sources. The data will also be deleted within 10 days after a statistical evaluation. Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified. We use hosting services. 

These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services to maintain the operation of this online offer. We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offer on the basis of our legitimate interests in making this online offer available efficiently and securely. 

III. Contractual processing

The personal data you provide for contractual purposes, e.g. when requesting a quote, such as name, address or e-mail address, will only be used internally to answer your enquiries, process your orders or give you access to certain contractual information. 

IV. Contact 

When you contact us by e-mail or via the contact form, your details will be saved by us in order to answer your questions. A transfer to third parties does not take place unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception to further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage no longer applies and there are no other conflicting legal exceptions. 

V.Cookies 

This site uses cookies. Cookies are small text files that are stored on your computer and through which certain information flows to the place that sets the cookie. They serve to make our website more user-friendly and effective and/or to make it easier for you to navigate our website. we set cookies, that are not strictly necessary, only with your consent. You can revoke this consent at any time for future use. Consent is voluntary and you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, reject the acceptance of third-party cookies or all cookies or delete cookies that have already been saved. If you do not accept cookies, please note that in this case our offer may not function correctly. If we do not provide any other information on the individual topics mentioned in this data protection declaration or in the cookie banner, the lifespan of the cookies is 24 months. You can find out which function on our website sets cookies below under the individual functions. 

VI. Newsletter

If you would like to receive the newsletter offered on our website, we need a valid e-mail address from you that allows us to verify that you are the owner of the e-mail address provided or that you are the owner with the receipt of the newsletter agrees. After you have provided your e-mail address, we will send you a confirmation e-mail to the address provided, in which we ask you to confirm that you wish the newsletter to be sent. If you do not confirm this within 24 hours, your data relating to the sending of the newsletter will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe from the newsletter. We only send newsletters with your consent or legal permission. We work together with a shipping service provider. According to its own information, the shipping service provider can use this data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of shipping and the presentation of the newsletter or for statistical purposes to determine from which countries the recipients come, use. However, the shipping service provider does not use the data of our newsletter recipients to write to them themselves or to pass them on to third parties. The newsletter is sent by shopware AG, Ebbinghoff 10, 48624 Schöppingen, referred to as "shipping service provider". You can view the data protection regulations of the shipping service provider here: https://www.shopware.com/de/datenschutz/.

Your personal data will not be disclosed to third parties. You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. You will find a link to cancel the newsletter at the end of each newsletter. If the users have only registered for the newsletter and canceled this registration, their personal data will be deleted. 

VII. Registration

Our website offers a registration option. The personal data entered during registration will be transmitted to the person responsible for processing. The data is stored by us solely for the purpose of internal use. When registering, the user's IP address and the date and time of registration are saved. This is to prevent misuse of the services. The data will not be passed on to third parties. There is an exception if there is a legal obligation to pass it on. The registration of the data is necessary for the provision of content or services. Registered persons have the option of having the stored data deleted or modified at any time. The person concerned receives information about the personal data stored about him at any time.

VIII. Our social media presence

You can find us under online presences within social networks and platforms. We would like to use these presences to communicate with our customers, interested parties and users who are active there, and in this way to inform them about our services and our company. The processing of the personal data of the users active there is based on our legitimate interests in communication and the provision of information to and with the users.

If the user has given their consent to data processing within the framework of the respective social platform, the processing takes place on this basis of consent. If you visit one of our social media presences, we are jointly responsible with the operator of the social platform for the data processing operations triggered during this visit. You can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaints), see the following point "Rights of the affected person”), in principle, both against us and against the operator of the respective social platform. We would like to point out that, despite the joint responsibility, we do not have full influence on the data processing operations of the social platform and, if necessary, forward the rights request to the respective operator in order to better process the rights of those affected. Our options are fundamentally based on the company policy of the respective provider.

Our information on storage can be found below. We have no influence on the storage period of your data, which is stored by the operator of the social platform for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their data protection declaration, see below).

Depending on the social platform named below, the data processing of users can also take place outside the area of the European Union. EU standard contractual clauses were agreed with the US companies, so that we were able to take possible measures to ensure European data protection law.

User data is usually processed by the platforms for market research and advertising purposes. For example, user profiles can be created from user behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the users' computers, in which the usage behavior and the interests of the users are stored. Data can also be stored in the usage profiles independently of the devices used by the users. This occurs in particular if the users are members of the respective platforms and are logged in to them. For a detailed description of the respective processing and the possibilities of objection, we refer to the following linked information from the providers.

  • Facebook (pages, groups) (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) The basis is an agreement on joint processing of personal data: https://www.facebook.com/legal/terms /page_controller_addendum Privacy Policy: https://www.facebook.com/about/privacy/ Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
  • Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/
  • Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) Privacy Policy/ Opt-Out: https://about.pinterest.com/de/privacy-policy

IX. Transfer of data to third parties: General and contractual purpose

We pass on data to third parties if this is necessary to fulfill the contract and/or we are legally obliged and/or entitled to do so in individual cases.

  1. Payment service provider: PayPal
    If you choose to pay with the online payment service provider PayPal as part of your order process, your contact details will be transmitted to PayPal when the order is placed. PayPal is an offer from PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider and a trustee and offers buyer protection services. The personal data transmitted to PayPal is data that is required for order processing as well as data that is related to the order, such as the number of items, item number, invoice amount. This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administrate your payment and the customer relationship. Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted to credit agencies. This transmission serves to check identity and creditworthiness in relation to the order you have placed. Which credit agencies are involved and which data is generally collected, processed, stored and passed on by PayPal can be found in PayPal's data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
  2. Payment service: Amazon Pay
    If you want to complete a payment with Amazon Pay as part of the ordering process, your contact details will be passed on to Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, L-1855 Luxembourg for payment processing. To provide the respective payment method, Amazon Payments reserves the right to obtain credit information. In addition, Amazon Payments is entitled to pass on your data to unnamed third parties (banks, e-service providers, service partners, but also auditors, analysis services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies). Further data protection information, including information on the credit agencies used, can be found in the Amazon Payments data protection declaration: https://pay.amazon.de/help/82974

X. Disclosure of data to third parties: tools for the efficient operation of the website

In some cases, we use external service providers within the scope of your consent or our legitimate interests with regard to the analysis, optimization and economic operation of the online offer. If you have given your consent to tools that are not required for the operation of the website, you can have these settings changed again at any time. Below we list our service providers. If your data is to be used for other purposes, we will inform you beforehand and only use the data if you have previously expressly given your further consent

  1. Service provider Google
    With your consent, we use services for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is responsible for the optimization and economic operation of our online offering. EU standard contractual clauses have been agreed with Google, so that we have been able to take possible measures to ensure European data protection law.

    a. Google Analytics
    Based on your consent, this website uses Google Analytics as a web analysis service. Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there.

    We would like to point out that this website uses Google Analytics with IP anonymization and therefore IP addresses are shortened by Google in member states within the European Union or in other contracting states of the Agreement on the European Economic Area prior to transmission in order to provide a direct personal reference rule out. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the provider, Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf. To our knowledge, under no circumstances will Google associate your IP address with other Google data.

    You can revoke your consent at any time with effect for the future by going to the cookie settings on our website and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected. You can also prevent the installation of cookies in advance by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of this website in full. You can also object to data collection and storage by Google for the respective end device at any time with effect for the future in connection with use under this link: http://tools.google.com/dlpage/gaoptout?hl=de

    The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options for protecting your privacy can be found in Google's data protection information at https://marketingplatform.google.com/about/analytics/terms/de / and at https://policies.google.com/?hl=de.

    b. Google Tag Manager
    We use the Google Tag Manager. This allows us to manage website tags via an interface and thus, for example, integrate Google marketing services into our online offer. The Tag Manager itself does not process any personal data of the users. For the respective Google services, reference is made to the respective notices and usage guidelines at https://www.google.com/intl/de/tagmanager/use-policy.html.

    c. Google reCaptcha
    To protect against misuse, we use the Google reCaptcha identification service on our website. The query with reCaptcha serves to distinguish whether the entries in the Internet form are made by a human or abusively by automated machine processing. The query includes sending your IP address and other data required by Google for the reCaptcha service to Google. This data is transmitted to Google servers in the USA, where it is stored and processed. Google may pass the collected data on to third parties. We would like to point out that as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by Google. The data protection regulations of the company Google apply to this data. In the respective reCaptcha window you will find a corresponding link to the current data protection regulations of Google Inc. under "Privacy Policy". You can also access them at https://www.google.com/intl/de/policies/privacy/. You can avoid the corresponding data collection by not using the reCaptcha function. We draw your attention to the fact that no requests can then be sent.
  2. Trusted Shops
    VARIANT SEAL OF QUALITY WITH REVIEWS
    Integration of the Trusted Shops Trustbadge The Trusted Shops Trustbadge is integrated on this website in order to display our Trusted Shops seal of quality and any reviews collected, as well as to offer Trusted Shops products to buyers after an order.
    This serves to protect our overriding legitimate interests in optimal marketing of our offer within the framework of a balancing of interests. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
    When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and documents the call. This access data is not evaluated and automatically overwritten no later than seven days after the end of your visit to the site.
    Further personal data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement made between you and Trusted Shops applies.
  3. DooFinder
    As part of your consent, we use a search algorithm from DooFinder S.L. to optimize our website. Madrid 28037 Rufino González 23 bis, 1°1, Spain. "Doo-Finder" optimizes the display of our online shop and you will be shown search results faster. With DooFinder S.L. an order processing contract has been concluded in accordance with Article 28 GDPR. You can find more information at https://www.doofinder.com/de/privacy-policy

XI. Data storage outside the EU/EEA

As can be seen in the individual tool descriptions, we use tools from US third-party providers. Insofar as this is necessary for the stated purposes, it may happen that your IP address is processed outside the European Economic Area, where a data protection level corresponding to the European standard is not consistently guaranteed and confirmed (e.g. by means of a suitable guarantee within the meaning of Art 46 GDPR or an adequacy decision by the European Commission). In particular, it cannot be ruled out that security authorities in a third country may gain access to your IP address without you being able to take legally effective action against it. The IP address is transmitted to these third-party providers in accordance with Article 49 (1) (a) GDPR on the basis of your express consent in the consent banner. This consent is voluntary. You can revoke this at any time with effect for the future. You will not suffer any disadvantages as a result. According to some US third-party providers, a level of protection corresponding to the European standard is already guaranteed due to the conclusion of so-called standard contractual clauses and additional measures taken within the meaning of the Schrems II case law. However, since the suitability of such measures to ensure an adequate level of data protection is disputed, we have decided to only transmit your IP address with your consent.

XII. rights of the data subject

You have the right to information about the personal data we have stored about you. According to the statutory provisions, you also have the right to correct incorrect data, blocking, data transferability and deletion of your personal data. To do this, send us an email with the subject "Privacy Policy". You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the statutory provisions. If you have given your consent, you have the right to withdraw your consent at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can object to the future processing of your personal data at any time in accordance with the legal requirements. The objection can be made in particular against processing for direct advertising purposes.

XIII. Duration of storage of personal data

Unless we have provided storage information on the specific points, the following applies: We store personal data for the duration of the respective statutory retention period or as long as the purpose of the collection exists. After the retention period has expired, the data is routinely deleted, unless there is a need to initiate a contract or to fulfill the contract. If user data is not deleted because it is required for other, legally permissible purposes, its processing will be restricted as far as possible. The data will be blocked accordingly if possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax reasons.

XIV. Security Information

We make every effort to process your personal data by taking all technical and organizational possibilities in such a way that the provisions of the data protection laws are observed and in order to protect this data. Our website and communication with us via our website is encrypted via HTTPS. This data protection declaration was provided by the law firm Sieling - specialist law firm for IT law.