Datenschutz

Information on the Processing of Your Data According to Art. 13 and Art. 14 of the General Data Protection Regulation (GDPR)

Content

1. General Information
2. Contact details of the controller and for data protection inquiries
3. Data processing in connection with our online presence
3.1 Presence on social media
3.2 Use of payment service providers
4. Data processing when using our website
5. Data transfer to third parties and external recipients
6. Use of data for communication and marketing
7. Use of Imprint Privacy Protection (IP Management)
8. Data retention period
9. Data security
10. Your rights as a data subject

1. General Information
Below, we would like to inform you about how we use and store personal data. If you access certain services (e.g., send us an email), personal data may be collected. We comply with the applicable European data protection regulations.

2. Contact details of the controller and for data protection inquiries
The controller for the online presence associated with this privacy policy is

Luis Kahnt
c/o IP-Management #10088
Ludwig-Erhard-Straße 18
20459 Hamburg

Phone: +49 1745978400
Email: kontakt@24node.eu

3. Data processing in connection with our online presence

3.1 Presence on social media

We place great importance on the protection of your data and responsible communication. Currently, we do not maintain our own presence on social networks. Should we establish a presence on platforms such as Facebook, Instagram, or similar networks in the future, we will inform you transparently and ensure that your personal data processed by us is protected in accordance with applicable data protection regulations.

Until then, you can access our content via this website.

3.2 Use of payment service providers

PayPal

If you choose to pay via PayPal, payment processing is handled by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). As part of this payment process, personal data is either transmitted to PayPal or transmitted by PayPal to us.

If you select PayPal as your payment method, we transmit certain personal data to PayPal to execute the payment, specifically the invoice amount and other information required for payment processing. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, as it is necessary for the fulfillment of the contract. Furthermore, we have a legitimate interest in using a secure and efficient payment system, so processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR.

To enable payment, PayPal may in turn transmit personal data to us, in particular your name, billing and shipping address, and, if applicable, other information required for the processing of the purchase agreement. This data processing is also based on Art. 6 para. 1 lit. b GDPR.

As the operator of this website, we do not receive complete payment data such as credit card numbers or bank details from PayPal. Instead, we only receive confirmation of the payment status (successful or failed), a transaction ID, and, if applicable, a note on fraud checks or chargebacks from PayPal. We process this information for the fulfillment of the contractual relationship in accordance with Art. 6 para. 1 lit. b GDPR.

PayPal also reserves the right to process personal data for identity and credit checks, as well as for fraud prevention. For this purpose, PayPal may share data with affiliated companies, payment service providers, or credit agencies. It is possible that personal data may also be transferred to third countries outside the European Union or the European Economic Area in this context. In such cases, PayPal ensures that appropriate safeguards are in place in accordance with Art. 46 GDPR, for example, through the conclusion of standard contractual clauses of the European Commission.

Further information on data processing by PayPal, as well as your rights and setting options, can be found in PayPal's privacy policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna

We offer various payment methods on our website via the payment service provider Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). Klarna enables various payment methods such as invoice purchase, instant transfer, and installment purchase. The processing of personal data in this context can be carried out both by us and by Klarna as an independent controller.

If you choose one of the payment options offered by Klarna, personal data will be transmitted to Klarna or by Klarna to us during the payment process. This includes, in particular, your name, billing and shipping address, email address, telephone number, and transaction and payment data. Depending on the chosen payment method, Klarna may also process additional information, such as your bank details or financing details. The processing of this data is carried out for the fulfillment of the contractual relationship in accordance with Art. 6 para. 1 lit. b GDPR. Furthermore, we have a legitimate interest in providing secure and efficient payment processing, so the processing also takes place on the basis of Art. 6 para. 1 lit. f GDPR.

If you choose to purchase on account or in installments via Klarna, Klarna will carry out an identity and credit check. Klarna processes personal data and may transmit it to credit agencies. This processing takes place on the basis of Klarna's legitimate interest in assessing creditworthiness in accordance with Art. 6 para. 1 lit. f GDPR. Klarna provides further information on this in its privacy policy.

When selecting the "Sofort" (instant) payment option, payment processing takes place directly via your online banking account. In this case, Klarna gains access to the bank details you provided, processes them to carry out the payment, and transmits the transaction status to us. The processing of this data is necessary for the fulfillment of the contract in accordance with Art. 6 para. 1 lit. b GDPR.

Klarna may disclose personal data to affiliated companies, payment service providers, or credit agencies to check creditworthiness, process payments, or prevent fraud. This may involve the transfer of data to third countries outside the European Union or the European Economic Area. In such cases, Klarna ensures that appropriate safeguards are taken in accordance with Art. 46 GDPR, for example, by concluding standard contractual clauses of the European Commission.

Further information on data processing by Klarna, as well as your rights and setting options, can be found in Klarna's privacy policy at: https://www.klarna.com/de/datenschutz/

4. Data processing when using our website

When you access our website, your internet browser automatically transmits the following data to our web server for technical reasons:

• IP address
• Date and time of the server request
• URL of the accessed file
• Amount of data transferred
• Operating system
• Information about the browser type and version used
• Name of the internet provider
• Website from which this website was accessed
• Page visited on our website

The collection, processing, and use of the above data serves the purpose of enabling the use and delivery of our website. Further purposes are the security of our IT systems and technical administration. The legal basis for processing is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest arises from the purposes mentioned above.

If you choose to use our contact form, your information will be used exclusively for the purpose of processing your inquiry and performing any services you may request through it. We only collect and process additional or other personal data if you use certain services and we require your data for this purpose, or if you have given us your express consent. For example, by filling out a corresponding form, sending us an email, ordering services, or making inquiries to us. The legal bases for processing are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.

Data processing when using our online shop
When you access our website, your internet browser automatically transmits certain data to our web server for technical reasons. This includes, among other things, your IP address, the date and time of the server request, the URL of the accessed file, the amount of data transferred, information about your operating system, information about the browser type and version you are using, the name of your internet provider, the website from which you accessed our website, and the pages you visited on our website. This data is processed exclusively for the purpose of providing and delivering website content and ensuring the security and stability of our IT systems. The processing is carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

In the course of your use of our online shop, we also collect personal data if you actively provide it as part of an ordering process or other inquiry. This particularly concerns data such as your name, contact details, delivery and billing address, and payment information, which are necessary for processing your order. The processing of this data is carried out for the fulfillment of the contractual relationship in accordance with Art. 6 para. 1 lit. b GDPR. If you also create a customer account, the data you provide will be stored to enable you to use it more comfortably and manage future orders. The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

If you use our contact form or contact us in any other way, your information will be used exclusively to process your inquiry. In cases where this is necessary, we also process your data to assert our legitimate interests, such as asserting or defending legal claims. The legal basis for this is Art. 6 para. 1 lit. f GDPR.

 

Shopify as a shop and hosting platform

For the operation of our online shop, we use the services of Shopify, offered by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify provides the technical infrastructure for our online shop and processes personal data of our customers on our behalf. This includes, in particular, inventory data, contact data, payment information, contract data, as well as usage and communication data, insofar as this is necessary for the provision and processing of our offer.

The processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) as well as on our legitimate interest in the secure and efficient operation of our online shop in accordance with Art. 6 para. 1 lit. f GDPR.

A data processing agreement (DPA) has been concluded with Shopify in accordance with Art. 28 GDPR.

It cannot be ruled out that data may also be transferred to Shopify Group companies in third countries, in particular Canada or the USA. Shopify bases such data transfers on appropriate safeguards in accordance with Art. 44 et seq. GDPR, in particular on standard contractual clauses of the European Commission.

Further information on data processing by Shopify can be found at:
Shopify Privacy Policy

 

Essential cookies and services for website operation
Essential cookies are required to ensure basic functions of our website and enable its operation. Processing takes place on the basis of our legitimate interest in the basic provision of our website. The legal basis is Art. 6 para. 1 f GDPR. Without these cookies, our website cannot function. These cookies can only be deactivated in the browser settings.

Data processing in connection with the cookie management tool

This website uses a cookie consent management system. This system serves to obtain and document the legally required consents for the use of technically non-essential cookies and similar technologies.

When accessing the website, a corresponding consent cookie is stored in the user's browser, which records the consents given or revoked. The information collected in this way is processed exclusively locally in the browser and not transmitted to the provider of the consent tool or third parties.

Processing is based on our legitimate interest in a legally compliant design of our website and the fulfillment of legal obligations to provide evidence in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 6 para. 1 lit. c GDPR.

5. Data transfer to third parties and external recipients
In certain cases, we are legally obliged to transfer data to an inquiring government agency, e.g., within the framework of national legal provisions. The legal basis for processing is Art. 6 para. 1 lit. c GDPR. When involving service providers as part of commissioned data processing, we comply with the data protection regulations pursuant to Art. 28 GDPR and Art. 44 et seq. GDPR.

Furthermore, we only transfer data to third parties if you have expressly consented to this, if the transfer is clearly necessary for the performance of a service you have requested (e.g., involvement of a shipping service provider), or if the transfer is legally mandated.

In the event of a transfer of personal data to countries outside the EU or the EEA, we take all necessary steps to ensure that appropriate measures have been taken to protect your personal data in accordance with data protection regulations, e.g., the application of standard contractual clauses approved by the EU Commission.

6. Use of data and communication and marketing

Surveys and advertising for similar products
To ensure that our service meets your wishes, we may use your email address, which you provide as part of an inquiry, order or in connection with the use of our free offers, for customer satisfaction surveys. As a customer, we may send you – even without prior consent – advertising by email for similar products, such as services you have commissioned or used from us in the past. The legal basis for processing is our legitimate interest in improving our services (Art. 6 para. 1 lit. f GDPR).

You can object to future use by sending a message to the contact details mentioned above or, in the case of a newsletter, use the unsubscribe link provided therein.

Newsletter Registration
If you sign up for our newsletter, we process the personal data you provide to regularly send you information about our offers, products, services, or relevant news. The personal data processed primarily includes your email address and, depending on the information provided, your name or other voluntarily provided information used to personalize the newsletter.

The processing of your data is based on your consent according to Art. 6 para. 1 lit. a GDPR, which you provide through your active registration, as well as on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, to optimize our offerings and communication with you.

For registering for our newsletter, we use the so-called double opt-in procedure. After registration, you will receive a confirmation email asking you to confirm your registration by clicking on a link. This procedure serves to ensure that no unauthorized third parties can register your email address for the newsletter. The logging of the double opt-in procedure (time of registration and confirmation, IP address) is done to comply with our legal obligations to provide proof.

You can revoke your consent to the processing of your personal data for newsletter dispatch at any time. For this, you can, for example, use the unsubscribe link contained in each newsletter. The revocation does not affect the lawfulness of the processing of your data carried out until then.

7. Use of Imprint-Privacy (IP-Management)
For the management of mail sent to us, we use the services of IMPRESSUM- PRIVATSCHUTZ GmbH, Ludwig-Erhard-Str. 18, 20459 Hamburg. This service provider offers a secure and reliable postal address for our project (e.g., imprint, privacy policy, right of withdrawal, and possibly other areas). This also represents our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. We have concluded a contract for commissioned data processing with Impressum-Privatschutz and fully implement the strict requirements of the German data protection authorities when using this service. Further information about data protection at Impressum-Privatschutz GmbH can be found here: https://impressum-privatschutz.de/datenschutzerklaerung/

8. Data Retention Period
We store personal data until you revoke your consent or the data is no longer required for the fulfillment of our business interests or for the provision of the service you requested, or if it is legally necessary.

9. Data Security
We attach great importance to the protection of your personal data and have therefore implemented technical and organizational measures (TOMs) to ensure an adequate level of protection in accordance with legal requirements, in particular the General Data Protection Regulation (GDPR). These measures serve to ensure the confidentiality, integrity, and availability of the data I process and to protect it from unauthorized access, loss, destruction, or manipulation.

The technical and organizational measures will be adapted to the state of the art as necessary to continue to ensure the protection of your data.

10. Your Rights as a Data Subject
You have the right at any time to request free information about the purpose, scope, origin, and recipients of your stored personal data (Art. 15 GDPR). In addition, you have the right to request the correction of inaccurate or incomplete data (Art. 16 GDPR).

According to data protection regulations, you also have the right to erasure of your personal data, provided the conditions of Art. 17 GDPR are met (right to be forgotten), as well as the right to restriction of processing of your personal data according to Art. 18 GDPR. Furthermore, you have the right to object to the processing of your personal data at any time (Art. 21 GDPR) if this processing is based on Art. 6 para. 1 lit. e or f GDPR. This applies in particular to the processing of your data for direct marketing purposes.

Furthermore, you have the right to data portability, i.e., you can receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or request the transmission of this data to another controller, provided the conditions of Art. 20 GDPR are met.

Should you believe that the processing of your personal data violates data protection regulations or that your rights have been infringed in any other way, you have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.

In addition, you have the right to withdraw your given consent to the processing of your personal data at any time with effect for the future, for example by an informal notification via email or in writing to the contact details mentioned above (Art. 7 para. 3 GDPR). The lawfulness of the processing carried out based on your consent up to the point of withdrawal remains unaffected by this.