Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide has no consequences. This only applies if no other information is given in the subsequent processing operations.
"Personal data" is all information that relates to an identified or identifiable natural person.
Server log files
You can visit our website without giving any personal information.
Every time our website is accessed, usage data is transmitted to us or our web host / IT service provider via your internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred and the requesting provider. The processing takes place on the basis of Art. 6 Paragraph 1 lit. f GDPR out of our predominant legitimate interest in guaranteeing the trouble-free operation of our website and improving our offer.
Customer account orders
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.
Collection, processing and transfer of personal data for orders
When you order, we only collect and process your personal data insofar as this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing takes place on the basis of Art. 6 Paragraph 1 lit. b GDPR and is necessary for the performance of a contract with you.
Your data will be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.
Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent that you have provided. The data processing serves the purpose of establishing contact. By sending your message, you consent to the processing of the transmitted data. The processing takes place on the basis of Art. 6 Paragraph 1 lit. a GDPR with your consent.
You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until the revocation. We only use your email address to process your request. Your data will then be deleted unless you have consented to further processing and use.
Use of the email address for sending newsletters
We use your e-mail address, regardless of the contract processing, exclusively for our own advertising purposes for sending the newsletter, provided you have expressly consented to this. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Your data will be passed on to a service provider for email marketing as part of order processing. Your data will not be passed on to other third parties.
Use of the email address for sending direct mail
We use your e-mail address, which we received in connection with the sale of a product or service, for the electronic transmission of advertising for our own goods or services that are similar to those that you have already purchased from us, if you have these Have not objected to use. The provision of the e-mail address is required for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing takes place on the basis of Art. 6 Para. 1 lit.f GDPR out of our predominant legitimate interest in direct mail. You can object to this use of your email address at any time by notifying us. You can find the contact details for exercising your objection in the imprint. You can also use the link provided in the promotional email. There are no other costs than the transmission costs according to the basic tariffs.
Use of an external inventory control system
We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected during the order will be sent to
Big Cartel Designated Agent
Stoel Rives LLP
201 South Main Street, Suite 1100
Salt Lake City, Utah 84111
Payment service provider credit report
Use of PayPal
Data collection and processing during credit checks
If we make advance payments, e.g. B. in the case of payment on account or direct debit, we reserve the right, if necessary, to obtain credit information on the basis of mathematical-statistical methods using BigCartel LLC. For this purpose, we transmit the personal data required for a credit check and use the information received about the statistical probability of default in payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit report can contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical methods and whose calculation includes address data, among other things. Your concerns will be considered in accordance with the statutory provisions. The data processing serves the purpose of credit checks for the initiation of a contract. The processing is carried out on the basis of Article 6 (1) (f) GDPR out of our predominant legitimate interest in protection against payment default when we make advance payments. For reasons that arise from your particular situation, you have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) GDPR by notifying us. The provision of the data is necessary for the conclusion of a contract with the payment method you require. Failure to provide the data means that the contract cannot be concluded with the payment method you have chosen.
The processing takes place on the basis of Art. 6 Paragraph 1 lit. f GDPR out of our predominant legitimate interest in guaranteeing the optimal functionality of the website and a user-friendly and effective design of our offer.
Under the following links you can find out how you can manage cookies in the most important browsers (including deactivating them):
Chrome browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Analysis of advertising
The data processing described below in this section, in particular the setting of cookies, takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.
Use of Google Analytics
We use the web analysis service Google Analytics from Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") on our website.
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google has certified itself under the US-EU data protection agreement “Privacy Shield” and is thus obliged to comply with European data protection guidelines.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install [https://tools.google.com/dlpage/gaoptout?hl=de].
To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must carry out the opt-out on all systems and devices used for this to have a comprehensive effect. If you delete the opt-out cookie, inquiries will be sent to Google again. If you click here, the opt-out cookie will be set: Deactivate Google Analytics.
Use of Facebook plug-ins
This website uses the plug-in of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). If you call up pages on our website with such a plug-in, a connection to the Facebook servers is established and the plug-in is displayed on the page through a message to your browser. This will tell the Facebook server which of our pages you have visited. If you are logged in as a member of Facebook, Facebook will assign this information to your personal Facebook user account. When using the plug-in functions (e.g. clicking the "Like" button, submitting a comment), this information is also assigned to your Facebook account, which you can only prevent by logging out before using the plug-in.
If you do not want Facebook to assign the information collected directly to your Facebook profile, you must either log out of Facebook before visiting our website or use a “Facebook blocker” to block the loading of the Facebook plug-ins on our pages .
You can find more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information: https://www.facebook.com/policy.php
Affected rights and storage duration
Duration of storage
After the contract has been fully processed, the data is initially stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial retention periods, and then deleted after the period has expired, unless you have consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR on: Right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, according to Art. 21 Paragraph 1 GDPR, you have the right to object to processing based on Art. 6 Paragraph 1 f GDPR, as well as against processing for the purpose of direct mail.
Contact us if you wish. The contact details can be found in our imprint.
Right of appeal to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you are of the opinion that the processing of your personal data is not lawful.
Right to object
If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 (1) (f) GDPR, you have the right to object to this processing at any time with future effect for reasons that arise from your particular situation.
After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
If the personal data processing takes place for the purposes of direct advertising, you can object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for the purpose of direct advertising.
last update: 01.03.2019