Data protection

Data protection

  1. Information on the collection of personal data and contact details of the person responsible

1.1 We are pleased about your visit to our website and thank you for your interest. On the following pages we will inform you about how your personal data is handled when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Farbod Puladchang, Nordkirchenweg 44, 48163 Münster, Germany, Tel.: 01734117553, Email: support@companioncompass.com . The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

  1. Data collection when you visit our website

2.1 If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if necessary: ​​in anonymized form)

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or. TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

  1. Hosting & Content Delivery Network Shopify

To host our website and display the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc.

All data collected on our website is processed on the provider's servers. We have concluded an order processing agreement with the provider that protects the data of our website visitors and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with European data protection levels.

In the case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision by the European Commission.

  1. Cookies

In order to make your visit to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values ​​on an individual basis. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

If personal data is also processed through individual cookies implemented by us, the processing takes place in accordance with Article 6 (1) (b) GDPR either to implement the contract or in accordance with Article 6 (1) (f) GDPR to protect our legitimate interests the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies Firefox: https://support.mozilla.org/de/kb/cookies- allow-and-reject Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en Safari: https://support.apple.com/de-de/guide/safari/sfri11471/ mac Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be restricted.

  1. Contact us

If you contact us (e.g. via contact form or email), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively to answer your request or to contact you and the associated technical administration.

The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted after your request has been finally processed; this is the case if it can be seen from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations to the contrary.

  1. Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you chose are saved and published on the website. Furthermore, your IP address is logged and stored. This IP address is required for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a comment made. We need your email address to contact you if a third party should complain that your published content is illegal. The legal basis for storing your data is Article 6 Paragraph 1 Letters b and f GDPR. We reserve the right to delete comments if they are criticized by third parties as being unlawful.

  1. Use of customer data for direct advertising 7.1 Registration for our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your email address. The provision of further data is voluntary and serves to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you the email newsletter if you have expressly confirmed that you would like to receive newsletters. We will then send you a confirmation email asking you to confirm your consent to future delivery of the newsletter by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) point a GDPR. If you register for the newsletter, we will store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to track possible misuse of your email address. The data we collect when you register for the newsletter is used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or send a corresponding message to the responsible person named at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly agreed to further use of your data or we reserve the right to use your data more extensively, which is permitted by law and about which we inform you in this statement.

7.2 Sending the newsletter to existing customers

If you have provided us with your email address when purchasing products, we reserve the right to periodically email you offers for products similar to those you have already purchased. In accordance with Section 7 Paragraph 3 of the German Act Against Unfair Competition, we do not require separate consent from you. In this context, data processing is carried out exclusively on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) point f GDPR. If you have initially opted out of having your email address used for this purpose, we will not send you email. You have the right to object to the future use of your email address for the above-mentioned advertising purposes at any time by notifying the body named at the beginning of this document. In this case, you only have to pay the transmission costs according to the basic tariffs. After receiving your objection, the use of your email address for advertising purposes will be stopped immediately.

7.3 Klaviyo

Our email newsletters are sent via this provider: Klaviyo", 225 Franklin St, Boston, MA 02110, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) point f GDPR so that they can send the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6 (1) point a GDPR, the provider also carries out a statistical analysis of the success of newsletter campaigns by using web beacons or tracking pixels in the emails sent, the opening rates and certain Be able to measure interactions with the newsletter content. Information about end devices (e.g. time of page view, IP address, browser type and operating system) is also recorded and analyzed, but is not linked to other data.

You can revoke your consent to newsletter tracking at any time in the future.

We have concluded an order processing agreement with the provider, which protects the data of our website visitors and prohibits passing it on to third parties.

  1. Processing of data for the purpose of order processing 8.1 Transmission of image files for order processing via the upload function

On our website we offer customers the opportunity to order customization of products by sending image files via an upload function. The submitted image serves as a template for customizing the selected product.

Using the upload function on the website, the customer can transfer one or more image files from the memory of the device used directly to us via automated, encrypted data transfer. We collect, store and use files transferred in this way exclusively to produce the individualized product defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be expressly informed in the following sections. There will be no further disclosure. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all of the above-mentioned processing operations will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) point b GDPR. After final processing of the order, the transmitted image files are automatically and completely deleted.

8.2 To the extent that this is necessary for contract processing and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Article 6 Paragraph 1 Letter b of the GDPR.

If we owe you updates for goods with digital elements or for digital products under a relevant contract, the contact details you provided when ordering (name, address, email address) will be used to contact you personally in an appropriate manner (e.g. B. by post or email) about upcoming updates within the legally prescribed period as part of our legal obligation to provide information in accordance with Article 6 (1) (c) GDPR. Your contact details will be used exclusively for the purposes of providing information about updates owed by us and will only be processed by us to the extent necessary for the relevant information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data will be transferred to these service providers in accordance with the information below.

8.3 We work with external shipping partners to fulfill our contractual obligations to our customers. We pass on your name and delivery address exclusively for the purpose of delivering goods to a shipping partner selected by us, in accordance with Art. 6 (1) point b GDPR.

8.4 Use of payment service providers

  • Amazon Pay

Online payment methods from the following provider are available on this website: Amazon Payments Europe sca, 38 avenue John F. Kennedy, L-1855 Luxembourg

If you choose a payment method from the provider for which you make a prepayment (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information about the contents of your Order transmitted to the provider in accordance with Article 6 Paragraph 1 Letter b GDPR. In this case, your data will only be passed on to the provider for the purpose of payment processing and only to the extent necessary.

  • Google Pay

If you select the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing will be carried out via the "Google Pay" application on your mobile device at least Android 4.4 ("KitKat") and an NFC function are supported by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). In order to approve a payment via Google Pay in the amount of more than €25, your mobile device must be previously activated using the relevant verification measure (e.g. facial recognition, password, fingerprint or pattern). To process the payment, the information you provided during the ordering process will be passed on to Google along with information about your order. Google then transfers your payment information stored in Google Pay to the originating website in the form of a unique transaction number, which is used to verify a payment. This transaction number does not contain any information about the actual payment details of your payment method stored with Google Pay, but is created and transmitted as a uniquely valid numerical token. All transactions via Google Pay are carried out exclusively between the user and the originating website by debiting the payment method stored in Google Pay. If personal data is processed in the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6 (1) (b) GDPR. Google also reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made through Google Pay. This includes the date, time and amount of the transaction, the location and description of the merchant, a description of the goods or services purchased provided by the merchant, photographs you attached to the transaction, the name and email address of the of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction. According to Google, this processing is carried out exclusively in accordance with Article 6 (1) (f) GDPR on the basis of the legitimate interest in proper accounting, checking transaction data and optimizing and maintaining the functionality of the Google Pay service. Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services. The terms of use of Google Pay can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en Further information about data protection at Google Pay can be found at the following internet address : https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en

Paypal

Online payment methods from the following provider are available on this website: PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg

If you choose a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information about the contents of your order passed on to the provider in accordance with Art. 6 (1) letter b GDPR. In this case, your data will only be passed on to the provider for the purpose of payment processing and only to the extent necessary for this purpose.

If you choose a payment method from the provider in which the provider makes payments in advance, you will also be asked during the ordering process to provide certain personal data (first name and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable data on alternative means of payment).

In order to protect our legitimate interest in determining the creditworthiness of our customers, we transmit this data to the provider for the purpose of a creditworthiness check in accordance with Article 6 (1) letter f of the GDPR. Based on the personal data you have provided as well as other data (such as shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have chosen can be granted in terms of payment and/or the risk of default.

The credit report can contain probability values ​​(so-called score values). To the extent that score values ​​are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, among other things, address data.

You can object to this processing of your data at any time by sending us or the provider a message. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.