Data Privacy Policy

Information about the collection of personal data and contact details of the responsible person

We are pleased that you visit our website and thank you for your interest. In the following we inform you about the handling with your personal data by using our website. Personal data means all data that you can be personally identified with.

Data collection
If you visit our website for informational purposes only, even if you do not register or inform otherwise, we collect only data which your browser transfers to one of our servers (so-called "server log files") and those who are technically necessary for us to ensure the view of our website stable and safe. The legal basis for this is Article 6 (1) (f) GDPR.


The following data is collected:
· Our visited website
· Date and time at the time of access
· Amount of data sent in bytes
· Source / reference from which you came to the page
· Used browser
· Operating system used
· IP address used (possibly in anonymous form)

A transfer or other use of the data does not take place. However, we reserve the right to retrospectively check the server logfiles should concrete evidence point to unlawful use.

Use of cookies and use of session IDs
When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and that provide certain information to the body that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
This website uses the following types of cookies, the scope and operation of which are explained below:

Transient cookies
These cookies are automatically deleted when you close the browser. These include, in particular, the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you close the browser.

Persistent cookies
These cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

Third-party cookies
We use so-called third-party cookies on our website. A third-party cookie is set by a third party, not the actual website you are currently visiting. Third party cookies can store the number of page views, as well as the length of stay on a website or the way a user has traveled via hyperlinks. They enable the tracking of user behavior across different websites. You can delete cookies in the security settings of your browser at any time.

Prevention of cookies
You can configure your browser settings according to your wishes e.g. decline the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all functions of this website.

Contact
When contacting us (for example, by e-mail), personal data is collected. These data are stored and used only for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO. If your contact is aimed at the conclusion of a contract, then additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your request, this is the case if it can be inferred from the circumstances that the matter in question is finally clarified and provided that no statutory storage requirements are in conflict.

Data processing when opening a customer account
According to Art. 6 para. 1 lit. b DSGVO personal data will continue to be collected and processed if you inform us when opening a customer account. The data collected is shown in the respective input forms. Deleting your customer account is possible at any time and can by a message to the address of the responsible person mentioned below. We store and use the data you have provided for the execution of the contract. After completion of the contract or deleting your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiration of these periods, unless you have expressly consented to further use of your data or a legally permitted further data use by our side which we will inform you accordingly below.

Sign up for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. Obligatory information for the sending of the newsletter is your e-mail address, as well as first and last name. The indication of further possible data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have explicitly confirmed to us that you agree to the sending of the newsletter. We will then send you a confirmation e-mail asking you to confirm by clicking on a link that you wish to receive newsletters in the future.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. By registration to our newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when register to our newsletter will be used exclusively for promotional purposes. You can unsubscribe from the newsletter at any time via the provided link in the newsletter or by sending a message to the person named below. After the deregistration, your e-mail address will be deleted immediately in our newsletter distribution, as far as you have not expressly consented to further use of your data or we reserve the right to further data use, which is permitted by law and about which we inform you in this statement.
The newsletters are distributed using MailChimp, a mailing service platform owned by Rocket Science Group, LLC, 675 Ponce De Leon Ave # 5000, Atlanta, GA 30308, USA. The privacy policy of the shipping service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is based on our legitimate interests Art. 6 para. 1 lit. f. GDPR and a contract processing agreement acc. Art. 28 (3) sentence 1 GDPR.
The shipping service provider may retrieve the data of the recipients in pseudonymous form, that means without assignment to a user, to optimize or improve their own services, e.g. for the technical optimization of shipping and the presentation of newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write them down or to pass the data on to third parties.

Website Analysis: Matomo

Nature and purpose of processing
This website uses Matomo (formerly Piwik), an open source software for the statistical evaluation of visitors. The supplier of the Matomo software is InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.
Matomo uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you.
The information generated by the cookie about your use of the website is stored directly on our web space in Germany.
The IP address is anonymized immediately after processing and prior to its storage. You have the option to prevent the installation of cookies by changing the settings of your browser software. Please note that not all features of this website may be available if you set it accordingly.
You can decide whether to save a unique web analytics cookie in your browser to allow the site operator to collect and analyze various statistical information.
For more information on the privacy settings of the Matomo software, see the following link: https://matomo.org/docs/privacy/.

Cloudflare
Our pages use features of CloudFlare. Provider is CloudFlare, Inc. 665 3rd St. # 200, San Francisco, CA 94107, USA
The operator of this website uses services of the company CloudFlare. CloudFlare offers a so-called worldwide distributed Content Delivery Network with DNS. Uses the Javascript / CSS libraries offered by CloudFlare through the network. CloudFlare is thus able to analyze the traffic between users and our websites. In addition, CloudFlare may store cookies on your computer for optimization and analysis. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our offer pursuant to Art. 6 (1) sentence 1 lit. f GDPR. For more information, see the CloudFlare Privacy Policy: https://www.cloudflare.com/security-policy

Adobe Typekit Web Fonts
Our website uses so-called web fonts from Adobe Typekit for uniform representation of certain fonts. Provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
When you visit our pages, your browser loads the required fonts directly from Adobe, in order to display them correctly to your device. Your browser will connect to Adobe's servers in the United States. This will give Adobe notice that your website has been accessed via your IP address. When providing the fonts, no cookies are stored according to Adobe.
Adobe has EU-US Privacy Shield certification. The Privacy Shield is an agreement between the United States of America and the European Union to ensure compliance with European privacy standards. For more information, please visit: https://www.adobe.com/de/privacy/eudatatransfers.html.
The use of Adobe Typekit web fonts is required to ensure a consistent typeface on our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
For more information about Adobe Typekit Web Fonts, visit: https://www.adobe.com/en/privacy/policies/typekit.html.
Adobe's privacy policy can be found at: https://www.adobe.com/privacy/policy.html

Font Awesome
This site uses so-called web fonts provided by Fonticons, Inc. for consistent font representation. When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts.
To do this, the browser you use must connect to the Fonticons, Inc. servers. This will give Fonticons, Inc. notice that your website has been accessed through your IP address. Also, the service of Fonticons, Inc. delivers a Google Analytics cookie. The use of web fonts is in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a default font will be used by your computer.
For more information about Font Awesome, visit https://fontawesome.com/help and the Fonticons, Inc. Privacy Policy: https://fontawesome.com/privacy.

Data transmission
A transmission of your data to third parties does not take place, except in the cases mentioned above, unless we are legally obliged to do so, or the data transfer is necessary to carry out a contractual relationship or you have expressly consented to the forwarding of your data.
External service providers and partner companies, such as a shipping company commissioned with the delivery will only receive your data as far as this is necessary to carry out the services ordered by you. In these cases, however, the amount of data transmitted is limited to the minimum required. In so far as our external service providers come in contact with your personal data, we provide in the context of order processing acc. Art. 28 GDPR ensures that they comply with the provisions of data protection laws in the same way. Please also note the respective privacy policy of the provider. The respective service provider is responsible for the content of third-party services, where we check the reasonableness of the services for compliance with legal requirements.
We attach great importance to processing your data within the EU / EEA. However, it may happen that we use service providers that process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection is provided to the recipient prior to the transmission of your personal data. By this is meant that through EU standard contracts or an adequacy decision, such as the EU Privacy Shield, a level of data protection is achieved that is comparable to the standards within the EU.

Links to other providers
Our website also contains links to websites of other providers to which our privacy policy does not extend. As a rule, we have no influence on the content and the compliance with the data protection regulations by these providers and therefore ask you to inform yourself about the applicable guidelines when visiting these websites.

Rights in the processing of data according to the legitimate interest
You have acc. Art. 21 (1) GDPR at any time, for reasons arising from its particular situation, against the processing of personal data relating to it, pursuant to Article 6 (1) of the GDPR (Data Processing in the Public Interest) or Articles 6 para. 1 f DSGVO (Data Processing for the Protection of a Justifiable Interest), an objection is raised, this also applies to a profiling based on this provision. In the event of your opposition, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.

Rights in direct mail
If we process your personal data to operate direct mail, you have acc. Art. 21 para. 2 GDPR the right to object at any time to the processing of personal data concerning you for the purpose of such advertising, this also applies to profiling in so far as it relates to such direct mail. In the event of your opposition to processing for the purpose of direct mail, we will no longer process your personal data for these purposes.

Rights of data subjects
You have the right to ask for confirmation as to whether the data in question is being processed and for information about this data as well as for further information and copying of the data in accordance with legal requirements.
You have according to the legal requirements to request the completion of the data concerning you or the correction of the incorrect data concerning you.
In accordance with the statutory provisions, they have the right to demand that the relevant data be deleted immediately or, alternatively, demand a restriction of the processing of the data in accordance with the statutory provisions.
You have the right to request that the data relating to you provided to us be obtained in accordance with legal requirements and to request their transmission to other persons responsible.
They also have the right, in accordance with the statutory provisions, to submit a complaint to the responsible supervisory authority.

Duration of storage of personal data
The duration of the storage of personal data is based on the respective legal retention period (e.g. commercial and tax retention periods). After the deadline, the corresponding data are routinely deleted, if they are no longer required for contract fulfillment or contract initiation and / or on our part no legitimate interest in the re-storage persists.
If you have any questions about the processing of your personal data or about privacy in general, you can contact our data security administrator, who will also be available to you in case of complaints:

Responsible within the meaning of the GDPR:

Jablonski, Harborth, Stobbe GbR
Gneisenaustr. 53a
10961 Berlin


Data Security Administrator
Marita Jablonski
Tel: +49. 30. 52 103 444
E-Mail: datenschutz@goodgarmentcollective.com
 
Version: May 2019