Privacy policy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means any data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Inachis Axis UG (haftungsbeschränkt), Ziegenstraße 34, 19079 Sukow, Germany, Tel.: +49 172 4218237, E-Mail: lena.meissner@inachisaxis.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

When using our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page content, we use the system of the following provider:
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the servers of the provider. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

In the case of data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some cookies are automatically deleted after you close the browser (so-called “session cookies”), while others remain on your device for longer and allow us to save site settings (so-called “persistent cookies”). You can find the storage duration in the cookie settings of your web browser.

If personal data is also processed by individual cookies we use, the processing is carried out pursuant to Art. 6(1)(b) GDPR for contract performance, pursuant to Art. 6(1)(a) GDPR in the case of consent, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective website experience.

You can configure your browser to inform you when cookies are set and decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contact

When contacting us (e.g. via contact form or e-mail), personal data is processed exclusively for the purpose of processing and responding to your inquiry and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your inquiry is aimed at the conclusion of a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your request has been conclusively answered, provided that no statutory retention obligations apply.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The required data can be seen from the respective input form on our website.

Deletion of your customer account is possible at any time and may be requested by sending a message to the above-mentioned controller. After deletion of your account, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention obligations, and we have no legitimate interest in continued storage.

7) Use of Customer Data for Direct Marketing

Newsletter Subscription

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further data is voluntary and will be used to address you personally. For newsletter distribution, we use the double opt-in procedure to ensure that you only receive newsletters once you have expressly confirmed your consent via the verification link sent to your specified e-mail address.

By activating the confirmation link, you consent to our use of your personal data in accordance with Art. 6(1)(a) GDPR. We store your IP address provided by the Internet service provider (ISP) as well as the date and time of registration in order to trace any possible misuse of your e-mail address at a later date. Data collected during the newsletter registration will be used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller named above. After unsubscribing, your e-mail address will be immediately removed from our mailing list, unless you have expressly consented to further use of your data or we are legally permitted to continue processing.

8) Data Processing for Order Handling

8.1 To the extent necessary for contract performance and delivery, personal data collected by us will be transmitted pursuant to Art. 6(1)(b) GDPR to the shipping company entrusted with the delivery and to the payment institution entrusted with payment processing.

If, under the terms of a contract, we owe you updates for goods with digital elements or for digital products, we will process the contact details you provided at the time of the order to inform you personally about necessary updates pursuant to Art. 6(1)(c) GDPR.

8.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. Your name, delivery address, and, if required for delivery, your telephone number, will be disclosed to the shipping partner selected by us exclusively for the purpose of delivering the goods pursuant to Art. 6(1)(b) GDPR.

8.3 Printful

For order fulfillment, we use the following provider: Printful, Inc., 11025 Westlake Drive, Charlotte, NC 28273, USA

Name, address, and, if applicable, other personal data will be passed on to the provider exclusively for the purpose of processing the online order pursuant to Art. 6(1)(b) GDPR, and only to the extent necessary.

For data transfers to the USA, the provider relies on the European Commission’s Standard Contractual Clauses to ensure compliance with European data protection standards.

8.4 Payment Service Providers

  • PayPal
    On this website, one or more online payment methods of the following provider are available: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method of this provider requiring prepayment, your payment data (including name, address, bank and card information, currency, and transaction number), as well as information about the content of your order, will be passed on pursuant to Art. 6(1)(b) GDPR exclusively for the purpose of payment processing and only to the extent necessary.

If you select a payment method where we provide goods in advance, you may also be required to provide certain personal data (first and last name, address, date of birth, e-mail, telephone number, alternative payment details).

To safeguard our legitimate interest in verifying your solvency, this data will be transmitted to the provider pursuant to Art. 6(1)(f) GDPR for the purpose of a credit check. The provider uses the information provided by you and other data (such as shopping cart, invoice amount, order history, and previous payment experience) to assess whether the chosen payment method can be granted.

Credit reports may contain probability values (so-called “score values”), which are based on a scientifically recognized mathematical-statistical method. Among other data, address details may be included in the calculation of the score values.

You may object to this processing of your data at any time by sending us a message or by contacting the provider directly. However, the provider may still be entitled to process your data to the extent necessary for contractual payment processing.

  • Shopify Payments
    On this website, one or more online payment methods of the following provider are available: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you select a payment method of this provider requiring prepayment (e.g. credit card payment), your payment data (including name, address, bank and card information, currency, and transaction number), as well as information about the content of your order, will be passed on pursuant to Art. 6(1)(b) GDPR exclusively for the purpose of payment processing and only to the extent necessary.

9) Rights of the Data Subject

9.1 Applicable data protection law grants you the following rights vis-à-vis the controller regarding the processing of your personal data (rights of access and intervention), with reference to the relevant legal basis:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to notification pursuant to Art. 19 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to withdraw consent pursuant to Art. 7(3) GDPR
  • Right to lodge a complaint pursuant to Art. 77 GDPR

9.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the relevant statutory retention period (e.g. commercial and tax retention periods).

  • If processing is based on express consent pursuant to Art. 6(1)(a) GDPR, the data will be stored until you withdraw your consent.
  • If statutory retention periods apply to data processed within the framework of legal obligations pursuant to Art. 6(1)(b) GDPR, such data will be routinely deleted after expiry of the retention periods, provided it is no longer necessary for contract fulfillment or initiation and/or we no longer have a legitimate interest in further storage.
  • If data is processed on the basis of Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, or the processing serves the establishment, exercise, or defense of legal claims.
  • If data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise stated in this policy for specific processing situations, personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.