Privacy Policy

The protection of your personal data is important to us. In this Privacy Policy, we explain which personal data we process when you visit and use our Regenhelden.de online shop, the purposes for which this processing takes place, and the rights you have under the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for the processing of personal data on this website is:

Regenhelden GmbH
Email: info@regenhelden.de

2. General Information on Data Processing

We process personal data only to the extent necessary for operating our online shop, processing orders, communicating with you, providing other functions requested by you, or where another legal basis for processing applies.

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, address, email address, telephone number, order data, payment information and, under certain circumstances, IP addresses and other online identifiers.

Depending on the respective purpose, the processing of personal data is carried out in particular on the basis of Art. 6(1)(a), (b), (c) and (f) GDPR.

3. Hosting and Server Log Files

When you access our website, technically necessary information may be processed by the web server and stored in so-called server log files. This may include, in particular, the following data:

- IP address of the accessing device
- Date and time of access
- Page or file accessed
- Amount of data transferred
- Browser type and browser version
- Operating system
- Referrer URL
- HTTP status code

This data is processed for the technical provision of the website, to ensure the stability and security of our systems, and to detect and prevent misuse and attacks.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our online shop.

4. Customer Account and Shopware

Our online shop is based on Shopware 6.

If you create a customer account, we process the data you provide in order to create and manage your customer account. This may include, in particular, your name, address, email address, telephone number, as well as your order and customer data.

In your customer account, you can view, among other things, your stored data and information about your orders.

The processing is carried out in order to take steps prior to entering into a contract and to perform the contractual relationship in accordance with Art. 6(1)(b) GDPR.

5. Orders and Contract Processing

If you place an order in our online shop, we process the personal data required to process and fulfil your order.

This includes, in particular:

- First and last name
- Billing and delivery address
- Email address
- Telephone number, where applicable
- Products ordered
- Order and invoice data
- Selected shipping method
- Selected payment method

The processing is carried out for the performance of the purchase contract and the processing of your order in accordance with Art. 6(1)(b) GDPR.

Where data must be stored due to statutory retention or documentation obligations, the processing is carried out on the basis of Art. 6(1)(c) GDPR.

6. Payment Processing

For the processing of payments, personal data may be transmitted to the payment service provider selected by you or to the financial institution involved. As a general rule, only the data required to process the respective payment is transmitted.

6.1 PayPal

If you select PayPal as your payment method, the data required for payment processing will be transmitted to PayPal.

The provider of European PayPal services is generally:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg

The data transmitted may include, in particular, your name, address, email address, order information, invoice amount and other information required for payment processing.

The processing is carried out in order to provide the payment method selected by you and therefore for the performance of the contract in accordance with Art. 6(1)(b) GDPR.

6.2 Credit Card

If you pay by credit card, the data required for payment processing will be transmitted to the payment service provider used by us and/or the participating payment and financial institutions.

6.3 Advance Payment

If you pay by advance payment, we process the data required to allocate and record your payment. As part of the payment process, corresponding data may be transmitted between the financial institutions involved.

7. Shipping and Delivery

In order to deliver your order, we transmit the data required for delivery to the respective shipping service provider.

This may include, in particular, your name, delivery address and, where necessary for delivery or where provided or authorised by you, additional contact details.

Shipping service providers may include DHL, Austrian Post and UPS. The shipping service providers actually offered depend, among other things, on the destination country, shipping method and order.

The transmission of data required for delivery is carried out for the performance of the purchase contract in accordance with Art. 6(1)(b) GDPR.

8. Contacting Us

If you contact us by email, contact form or by other means, we process the personal data you provide in order to handle your enquiry and any follow-up questions.

If your enquiry relates to an existing or intended contractual relationship, the processing is carried out on the basis of Art. 6(1)(b) GDPR. In other cases, the processing may be based on our legitimate interest in handling customer enquiries in accordance with Art. 6(1)(f) GDPR.

9. Newsletter and Brevo

You can subscribe to our free newsletter in our online shop. We use Brevo to send and manage our newsletter.

If you subscribe to the newsletter, we process, in particular, your email address and the data required to document your subscription.

Registration generally takes place using a double opt-in procedure. After registering, you will receive an email containing a confirmation link. Your subscription will only be completed after you have confirmed this link.

In order to document a valid subscription, we may store, in particular, the time of registration, the time of confirmation and technical information such as the IP address used during the process.

The legal basis for sending the newsletter is your consent in accordance with Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future. An unsubscribe link is included in every newsletter. You may also send your unsubscribe request to us by email at info@regenhelden.de.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.

10. Cookies and Similar Technologies

Our online shop uses cookies and similar technologies. Cookies are small files or pieces of information that may be stored on or accessed from your device.

Some cookies and technologies are technically necessary in order to provide basic functions of our online shop. These may include, for example, the shopping cart, customer account login, language settings, security functions and the storage of your privacy preferences.

Cookies and comparable technologies that are not technically necessary, in particular those used for analytics purposes, are only used after you have given your consent, where such consent is required by law.

You can manage your choices using the cookie or privacy settings provided on our website and withdraw any consent you have given with effect for the future.

11. Google Analytics 4

If you have consented to the use of analytics technologies, we use Google Analytics 4 to analyse the use of our online shop.

Google Analytics enables us to obtain information about how visitors use our online shop. This may include information about pages viewed, interactions with the website, the browser and device type used, approximate geographical information, as well as the time and duration of visits.

According to Google, IP addresses of users within the European Union are not logged or stored. IP addresses are used to derive approximate location information and are subsequently discarded.

Google Analytics is only used for analytics purposes after you have provided the corresponding consent via our cookie or privacy settings.

The legal basis for this processing is your consent in accordance with Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future via our cookie or privacy settings.

When using Google services, it cannot be ruled out that personal data may also be processed outside the European Economic Area. Where data is transferred to a third country, such transfer will be based on a lawful basis permitted under the GDPR.

12. YouTube

Videos from the YouTube service may be embedded on our website.

When you access a page containing an embedded YouTube video, data may be transmitted to YouTube and/or Google. This may include, in particular, information about the page accessed, technical information about your device and browser, as well as your IP address.

Where consent is required for the integration of YouTube, the corresponding content or connections to YouTube will only be activated after you have given your consent.

In this case, the legal basis is your consent in accordance with Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future via our cookie or privacy settings.

If you are logged into a Google or YouTube account at the same time, Google may be able to associate your visit to our website with your user account.

13. Social Media and Messenger Services

Our website may contain links to our profiles or services on Facebook, Instagram, Pinterest, X and WhatsApp.

In the case of simple links, a connection to the respective provider is generally only established when you click on the corresponding link.

If social media content, plugins or comparable functions are additionally embedded directly into our website, personal data may be transmitted to the respective provider when such content is loaded or activated. Where consent is required for this purpose, activation will only take place after you have given your consent.

The respective provider's privacy policy also applies to the further processing of your data on the respective platform.

14. Google Fonts

We do not embed Google Fonts directly from Google's servers. Where fonts are used, they are provided locally or otherwise without requiring a connection to Google for their display.

As a result, no connection to Google servers is established solely for the purpose of displaying the fonts used.

15. Recipients of Personal Data

In connection with the operation of our online shop, personal data may be transmitted, in particular, to the following categories of recipients:

- Hosting and IT service providers
- Payment service providers and financial institutions
- Shipping and logistics companies
- Newsletter service providers
- Analytics and technical service providers, where you have given your consent
- Tax advisers, accounting service providers and other professional advisers, where necessary
- Authorities and public bodies, where required by law

Where service providers process personal data exclusively on our behalf, they are engaged, where required, on the basis of a data processing agreement pursuant to Art. 28 GDPR.

16. Storage Period

As a general rule, we store personal data only for as long as necessary for the respective processing purpose or for as long as statutory retention obligations apply.

Data relating to orders, invoices and business transactions may be stored for several years due to tax, corporate and commercial law retention obligations.

After the relevant retention period has expired, the data will be deleted unless it is still required for the establishment, exercise or defence of legal claims or for another legally permissible reason.

Data processed exclusively on the basis of your consent will generally be processed until you withdraw your consent or in accordance with the deletion periods applicable to the respective service.

17. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration and unauthorised disclosure.

Data transmitted between your browser and our website is encrypted using HTTPS and/or TLS.

Please keep the login details for your customer account confidential and do not disclose your password to third parties.

18. Your Rights

Subject to the applicable statutory requirements, you have, in particular, the following rights regarding your personal data:

- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR

You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out prior to the withdrawal of your consent remains unaffected.

To exercise your rights, you may contact us at any time:

Regenhelden GmbH
Email: info@regenhelden.de

19. Right to Lodge a Complaint with a Data Protection Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

20. Changes to this Privacy Policy

We may amend this Privacy Policy if our website, the services we use or the applicable legal requirements change.

The current version of the Privacy Policy published on Regenhelden.de applies.