PRIVACY POLICY

 
 

GENERAL NOTES

Thank you for visiting our website and for your interest in our company and our products. The following information provides a simple overview of what happens to your personal data when you visit our website www.coolscollection.com. Personal data are all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.

 

RESPONSIBLE

Responsible in the sense of the EU Data Protection Basic Regulation or (hereinafter: "DSGVO") for the processing of personal data relating to the use of the website:

COOLS - Contemporary Objects of Love GbR

Authorized representative partner: 
Maria Francesca Staehle & Stefania Andorlini
Maybachufer 21 
12047 Berlin

e-mail: hello@coolscollection.com

(hereinafter "COOLS", "us", "we")

YOUR RIGHTS AS AN AFFECTED PERSON

Right of objection

You are entitled to object to the processing of your personal data (Art. 21 DSGVO/GDPR) if the personal data concerned are processed on the basis of legitimate interests (Art. 6 Para. 1 S. 1 lit. f DSGVO/GDPR) and if there are reasons arising from your particular situation. If your objection is directed against direct advertising, you may at any time object to the processing of the data concerned without providing information about your particular situation.

Other rights

Furthermore, you have the right

a) to request information about your stored personal data at any time (Art. 15 DSGVO/GDPR);

b) to demand the correction or completion (Art. 16 DSGVO/GDPR), deletion (Art. 17 DSGVO/GDPR) or restriction (Art. 18 DSGVO/GDPR) of the processing of the corresponding personal data, provided that the legal requirements are met;

c) to receive the personal data concerning you in a structured, common and machine-readable format (Art. 20 DSGVO/GDPR);

d) to revoke at any time in the future any consent granted for the use of personal data (Art. 7 para. 3 DSGVO/GDPR) and

e) complain to the competent supervisory authority for data protection if you believe that the processing of personal data concerning you in relation to the use of the website violates the applicable data protection law (Art. 77 DSGVO/GDPR). Your competent supervisory authority depends on the state of your residence, your work or the alleged infringement. A list of the supervisory authorities (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

To exercise any of your above rights, simply send an e-mail to hello@coolscollection.com.

 

PROCESSING OF DATA DURING VISITS TO THE WEBSITE

When you visit our website, the personal data that your browser transmits to the website server is collected and temporarily stored in a log file ("log files"). The data stored in this context includes in particular the following data (this website is hosted by Squarespace):

- IP address of the requesting computer

- Name and URL of the retrieved file

- Date and time of access

- Operating system used

- Access status/HTTP status code

- Amount of data transmitted in each case

- Identification data of the browser used

The processing of this data is technically necessary in order to display the website (connection establishment) and to ensure stability and security. Log files are stored to ensure the functionality of the website. In addition, this data is used to optimise the website and to ensure the security of our systems. We do not use the data to draw conclusions about your person. 

Insofar as personal data is involved in the processing of data in connection with a visit to the website, the corresponding processing of this data is based on Art. 6 Para. 1 S. 1 lit. f DSGVO/GDPR (legitimate interest). The legitimate interest results from the above-mentioned purposes.

 

COOKIES

Our website uses cookies. Cookies are text files which are stored on a computer system via an Internet browser. If a user accesses our website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.  Cookies serve to make our website more user-friendly, effective and secure. They do not cause any damage to your computer and do not contain viruses. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this data protection declaration. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this data protection declaration.  The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this data protection declaration.

ANALYSIS, TOOLS & ADVERTISING

When you visit our website, we analyse and document your user behaviour in order to make our website more interesting and offer you individual, interest-related advertising recommendations. Furthermore, we process your personal data for advertising measures in the form of remarketing.

(1) Squarespace Analytics & Cookies

For the operation of our website we use the Squarespace platform, a service of Squarespace Ireland Ltd, Le Pole House, Ship Street Great, Dublin 8, Ireland. Squarespace complies with the EU-US Privacy Shield, see here www.privacyshield.gov/list

Squarespace Analytics uses so-called "cookies". More about Squarespace Cookies: https://www.squarespace.com/cookie-policy

Here you can find out which cookies Squarespace uses: https://support.squarespace.com/hc/en-us/articles/360001264507

Cookies do not damage your computer and do not contain viruses. Cookies serve to make the offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies used are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies make it possible to recognize your browser at your next visit.

The information generated by cookies about your use of this website (including your IP address) is transmitted to a Squarespace server in the USA and stored there. Squarespace will use this information to evaluate your use of the website, to compile reports on website activities for the website operators and to provide further services associated with website and Internet use. Squarespace may also transfer this information to third parties if this is legally required or if third parties process this data on behalf of Squarespace.

By using this website, you agree to the processing of the data collected about you by Squarespace in the manner described above and for the aforementioned purpose. You can find more information about Squarespace's privacy policy at www.squarespace.com/privacy.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 Para. 1 lit. f DSGVO/GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services.

(2) Google AdWords

We use on the website the online advertising system Google Ads of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In the context of Google Ads, we use the Conversion Tracking application (visitor action analysis). When you click on an ad placed by Google, a cookie is set for conversion tracking. These cookies expire after 30 days and are not used to personally identify users. If you visit certain pages on our site and the cookie hasn't expired, Google and we may recognize that you clicked on the ad and were redirected to that page.

Each Google Ads customer receives a different cookie. Cookies cannot be tracked through the web pages of ads customers. The information collected through the conversion cookie is used to compile conversion statistics for those ads customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

The legal basis for the use of Google Ads is Art. 6 (1) lit. f DSGVO/GDPR (legitimate interests). We have a legitimate interest in targeted advertising and the analysis of the impact and efficiency of this advertising. You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 (1) f DSGVO/GDPR.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. You will find instructions for this under the following link: https://support.google.com/ads/answer/2662922?hl=de

If cookies are deactivated, the functionality of this website may be limited.

For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield.

You can find more information here: https://www.privacyshield.gov/EU-US-Framework

For more information and the Google privacy policy, please see here: https://policies.google.com/technologies/ads?hl=de

(3) Facebook pixel

Furthermore, we use the analysis tool "Facebook Pixel" of the social network Facebook. Facebook Pixel is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

Facebook pixels help us measure the effectiveness of our advertising and analyze the actions that users take on our website. Through Facebook pixels, we can identify you, as a visitor to our online offering, as a target group for the display of advertisements (so-called "Facebook ads").

We use Facebook pixels in order to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our website or who have certain characteristics (such as interest in certain topics or products) that we transmit to Facebook (so-called "custom audiences"). By using Facebook pixels, we want to ensure that our Facebook ads correspond to the potential interest of users. We can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook ad (so-called "conversion").

The legal basis for the use of the Facebook pixel and the storage of "conversion cookies" is Art. 6 para. 1 lit. f DSGVO (legitimate interests). We have a legitimate interest in the analysis of user behaviour in order to optimise both our website and our advertisements.

For the exceptional cases in which personal data is transferred to the USA, Facebook has subjected itself to the EU-US Privacy Shield. For more information, please click on the following link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

You can find more information on the collection and use of data via Facebook, on your rights in this regard and on ways to protect your privacy in the Facebook Privacy Shield.

(4) Google Analytics

We use Google Analytics, an advertising analysis service. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) is transferred to a Google Inc. server in the USA and stored there anonymously. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with any other data held by Google.

Also in this respect it applies that you can prevent the installation of cookies by the corresponding system settings of your browser. If you do not accept these cookies, however, this may lead to functional limitations of our website offers, which is why you cannot use our website to its full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on at http://tools.google.com/dlpage/gaoptout?hl=de.

In the case of mobile use of our website, you can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your data during future visits to this website. If you delete your cookies, you will have to click this link again: https://www.google.com/settings/ads/onweb/

By using our website, you agree to the processing of the data collected about you by Google in the manner described above and for the aforementioned purpose.

CONTACT

A contact form is available on the website, which can be used for electronic contact. The data entered in the registration form will be transmitted to us and stored, if you send us an inquiry. These data are:

·       Your name

·       E-mail address

Moreover, at the time the message is sent, the date and time will be stored and, if applicable, other data provided by you if you specify in the message sent.

Alternatively, you can contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. The data is used exclusively for the purpose of processing contact inquiries and serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of this personal data is Art. 6 para. 1 sentence 1 lit. f. DSGVO/GDPR (legitimate interests). The legitimate interest arises from the fact that only by processing the user's data in an appropriate manner can we carry out the action requested by the user (e.g. answering queries). If the aim of the contact is the conclusion of a contract, the legal basis for the processing is additionally Art. 6 Para. 1 lit. b. DSGVO/GDPR.

NEWSLETTER

On the website there may be the possibility to order a free newsletter. When registering for the newsletter, your e-mail address will be transmitted. This collection of the user's e-mail address is used to deliver the newsletter.

For the registration to our newsletter we use the so-called Double-Opt-In procedure. This means that after registration we send you an e-mail to the specified e-mail address in which we ask for confirmation that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to prove your registration and to be able to clarify any possible misuse of your personal data.

The newsletter is sent by "MailChimp", which is located in the USA. The transmitted data will therefore be processed in this named third country.

The shipping service provider is subject to the EU-U.S. Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level.

Please see here for the privacy policy of the shipping service provider: https://mailchimp.com/legal/privacy/

"MailChimp" may use the data of the recipients without allocation to a single user, for optimizing its own service or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties. When the newsletter is sent, your user behaviour is evaluated by MailChimp. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the analysis we link the above mentioned data and the web beacons with your e-mail address and an individual ID. With the data thus obtained, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on and deduce your personal interests. We link this data to actions you take on our website. You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us via another contact channel. The information is stored as long as you have subscribed to the newsletter. After you have unsubscribed, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place. In connection with the data processing for the dispatch of newsletters, except for the provider Mailchimp, the data is not passed on to third parties. The data will be used exclusively for sending the newsletter.

The data will only be stored until you unsubscribe the newsletter. Afterwards the e-mail address will be blocked concerning the newsletter delivery and if necessary deleted completely. You can unsubscribe from the newsletter at any time. For this purpose you will find a corresponding opt-out link in every newsletter. You can also declare the cancellation by e-mail or by sending a message to the address given in the imprint.

The legal basis for the processing of the data of a newsletter and by us is Art. 6 para. 1 lit. a DSGVO/GDPR (consent of the user) or, if a business relationship exists with regard to information about at least similar services by us, also Art. 6 para. 1 lit. b DSGVO/GDPR (fulfilment of contract). The mail order service provider "MailChimp" will be informed on the basis of our legitimate interests according to art. 6 para. 1 lit. f. DSGVO/GDPR and an order processing contract according to art. 28 para. 3 S. 1 DSGVO/GDPR.

THIRD PARTY CONTENT

(1) Social Media Plug-Ins

We currently use the following social media plug-ins: Facebook, Instagram and Pinterest. We use the so-called two-click solution.

This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the Plug-In by the mark on the box above its initial letter or the logo. The buttons give you the opportunity to communicate directly with the provider of the plug-in. If you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned above will be transmitted.

In the case of Facebook, according to the provider in Germany, the IP address is anonymised immediately after it is collected. When the plug-in is activated, your personal data is transmitted to the respective plug-in provider and stored there (with US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

We have no influence on the collected data and data processing procedures, nor are we aware of the full scope of data processing, the purposes of data processing, the storage periods. We also have no information about the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider in order to exercise this right. Via the plug-ins we offer the possibility to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

The legal basis for the use of the plug-ins is Art. 6 Paragraph 1 S.1 lit. f. DSGVO/GDPR (legitimate interests).

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect will be directly assigned to your account with the plug-in provider. If you click on the activated button and link to the page, for example, the plug-in provider will also save this information in your account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this can prevent the Plug-In Provider from assigning you to your profile.

(2) Social media corporate sites

When you visit our corporate site on Facebook, Instagram and/or Pinterest, these providers collect personal information. This applies even if you do not have a user account. Please note that we cannot control the type and scope of data processing by the social media providers. The providers only provide us with anonymous demographic data in aggregated form that helps us to get to know our audience better. Facebook uses cookies and similar technologies to record the usage behavior of fan page visits for each interaction with fan pages. On this basis, the fan page operators receive so-called "page insights". Page-Insights only contain statistical, depersonalized (anonymized) information about visitors to the fan page, which therefore cannot be assigned to a specific person. We have no access to the personal data used by Facebook to create Page-Insights ("Page-Insights data"). The selection and preparation of Page-Insights data is carried out exclusively by Facebook.

With the help of Page Insights, we obtain information on how our fan pages are used, what interests visitors to our fan pages have and which topics and content are particularly popular. This allows us to optimize our fan page activities, for example, by being able to better respond to the interests and usage habits of our audience when planning and selecting our content.

We and Facebook are jointly responsible for processing your data for the provision of page insights. For this purpose, we and Facebook have concluded an agreement to determine which company fulfils which data protection obligations under the DSGVO/GDPR with regard to the processing of Page-Insights data.

When you visit our fan pages, we generally record all messages, content and other information that you provide us directly there, such as when you post something on a fan page or send us a private message. If you have an account with the respective social network, we can of course also see your public information, such as your user name, information in your public profile and content that you share with a public target group.

To the extent that you have consented to the creation of Page Insights vis-à-vis Facebook as described above, the legal basis is Article 6(1)(a). DSGVO/GDPR (Consent). Otherwise, the legal basis is Article 6 para. 1 lit. f. DSGVO/GDPR, whereby our legitimate interests lie in the above-mentioned purposes.

(3) Further information on social media providers

Further information on the purpose and scope of data processing and processing by social media providers can be found in the data protection declarations of these providers, which are provided below. There you will also find further information on the relevant rights and setting options to protect your privacy.

Facebook, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, at the following links https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/terms/information_about_page_insights_data .

Instagram, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, at the following link: https://help.instagram.com/402411646841720

Pinterest, Pinterest Europe Ltd, Palmerston House, 2nd floor, Fenian Street, Dublin 2, Ireland, at the following link: https://policy.pinterest.com/de/privacy-policy

SHOPPING

(1) Order

We offer the possibility to request and purchase our products without registering for a customer account via an order form.


The following data is collected as part of the order process through the order form:

·       First and last name (required)

·       Billing or delivery address (required)

·       E-mail address (required)

·       If applicable, it will be required details of payment method such as bank account number or credit card number, IBAN or Paypal

The order form serves the purpose of concluding a contract with us or sending a manufacturing request. The data which is processed in the order form, thus serves to conclude or terminate the contract with the user.


The legal basis for this data processing is Art. 6 para. 1 (b) GDPR (fulfilment of contract and pre-contractual measures), as the user provides us with the data based on the respective contractual relationship (for example, managing the customer account, processing the purchase contract).


(2) Payment service provider

We use external payment service providers such as Paypal and Stripe to process credit card payments, whose platforms are used to process payment transactions. The following data belong to the data processed by the payment service providers: Inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, totals and recipient details. Depending on the service provider, this information is mandatory in order to successfully complete the transactions.


The data entered by you will only be processed and stored by the external payment service providers named by us. We do not receive account or credit card related information. We will be only informed either the payment is completed or we will receive negative information. Under certain circumstances, the data may be transmitted to credit agencies of the payment service providers named by us. The purpose of this transmission is to check identity and creditworthiness. The payment transactions are subject to the data protection notices of the respective payment service providers, which can be accessed within the respective websites or transaction applications. We refer to these also for the purpose of further information and assertion of revocation, information and any other affected rights:

·       Paypal under the following link

·       Stripe under the following link

The legal basis is Art. 6 para. 1 (f) GDPR (legitimate interests). The legitimate interest is based on the fact that payment providers have a legitimate interest in understanding whether and how often the website is used to ensure and improve the functionality of your services. In addition, we have a legitimate interest in offering our customers different payment methods.

USE AND DISCLOSURE OF DATA

The personal data collected in the course of using the website will only be used without your consent for order processing or processing your enquiries. In addition, external service providers (e.g. hosting providers; newsletter service providers) are used for the operation of the website and the services offered on the website, who process your personal data on our behalf and exclusively according to our instructions. The legal basis for such data processing is Art. 6 para. 1 sentence 1 lit. b DSGVO/GDPR (fulfilment of contract and pre-contractual measures) and Art. 28 DSGVO/GDPR (processing of orders). A use for the purpose of advertising as well as a need-based design of electronic services of COOLS GbR will only take place if you have given your prior consent. Your data will not be passed on or transmitted to third parties.

If necessary, personal data will be transmitted to state institutions and authorities, as far as there is a legal obligation to do so (Art. 6 para. 1 p. 1 lit. c DSGVO/GDPR).

STORAGE PERIOD

Your personal data will only be stored for as long as necessary to process your enquiries to us, unless a different storage period results from the other provisions of this privacy policy. In addition, we store your data only to the extent and to the extent that we are obliged to do so by mandatory statutory storage obligations. If we no longer need your data for the purposes described above, they will only be stored during the respective legal retention period and will not be processed for other purposes.

DATA SECURITY

In order to guarantee data security, in particular to protect your personal data from risks during data transmission and from third parties gaining knowledge of it, we use up-to-date technical and organisational measures in the operation of the website. We use SSL or TLS encryption via HTTPS.

CHANGES AND UPDATES

Due to further developments of our website or legal changes, it may become necessary to change this privacy policy. We therefore reserve the right to change the data protection declaration at any time with effect for the future and therefore recommend that you read this data protection declaration again at regular intervals.