(1) INFORMATION ON THE COLLECTION OF PERSONAL DATA (1.1) Below we provide information about the collection of personal data when you use our website. Personal data is all data that can be personally related to you, such as your name, address, email addresses, and user behavior. (1.2) The responsible party according to Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is berseeBS Cagla Savas, Gerokstraße 6, 78056 Villingen-Schwenningen, email: berseegmbh@gmail.com If you are a data protection officer, please contact us at: berseegmbh@gmail.com or our postal address with the addition “Data Protection”. (1.3) If we use contracted service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the established criteria for the storage period. (2) YOUR RIGHTS (2.1) You have the following rights with regard to your personal data: Right to information Right to rectification or erasure Right to restriction of processing Right to object to processing Right to data portability To exercise your rights, you can contact us using the contact details provided above. (2.2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data. (3) OBJECTION OR REVOCATION TO THE PROCESSING OF YOUR DATA (3.1) If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation will affect the legality of the processing of your personal data after you have expressed it to us. (3.2) If we base the processing of your personal data on a balance of interests, you may object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we do. If your objection is justified, we will examine the situation and either stop or adapt the data processing or explain our compelling legitimate grounds to you. (4) OBLIGATION TO PROVIDE PERSONAL DATA (4.1) There is no obligation to provide the personal data collected on this website. It is not required by law or contract, nor is it necessary for the conclusion of a contract. To the extent that data collection is necessary to display the website, error-free operation of the website cannot be ensured without data collection. In these cases, data collection occurs automatically when the website is made available or based on the consent you have given. (4.2) Contacting us and subscribing to our newsletter is generally not possible without providing the minimum data. (4.3) When placing orders in our online shop, the relevant mandatory information is required for the conclusion of the purchase contract and the execution of payment. A purchase is not possible without this information. (5) HOSTING VIA SHOPIFY Our online shop uses the Shopify platform. This is provided to us by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. We have concluded a data processing agreement with Shopify in accordance with Art. 28 GDPR, which regulates the processing of your personal data by Shopify. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services from Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. for further processing on behalf of Shopify. In the event that data is transmitted to Shopify Inc. in Canada, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Shopify also processes your data on servers in the USA and has promised, as part of the order processing agreement, to only do so in compliance with the statutory regulations. Shopify may use other subcontractors to process your personal data and uses, among others, Google Analytics and Cloudflare. The legal basis for the transfer of your personal data to Shopify servers in the USA is Art. 49 (1) lit. b GDPR, as this is necessary for the execution of the contract or for pre-contractual measures in our online shop. In the opinion of the EU Commission, there is no adequate level of data protection in the USA; in particular, there is a risk of access by US security authorities without EU citizens being able to appeal against this. Further information on Shopify’s data protection can be found on the following website: https://www.shopify.de/legal/datenschutz Shopify is used on the basis of Art. 6 (1) lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website possible. (5.1) We may also process the data you provide to inform you about similar products or to send you transactional emails. (5.2) We are obliged under commercial and tax law to store your address, payment and order data for a period of ten years. (5.3) In addition to the data mentioned above, Shopify also processes the following data for us: IP address Information as part of reporting and statistics from cookies set by Shopify, e.g. the website that may have linked you to our shop, how often you have visited our website, information about your device or browser, products stored in your shopping cart. Further information on the cookies used by Shopify when you visit our shop can be found in the “Use of cookies” section above. Information about placed orders If you contact Shopify’s telephone support, Shopify will process your telephone number, audio content and information that you provide during the call, as well as, if necessary, information to verify your identity, in order to process your support request. If you use Shopify’s online chat for support requests, Shopify will process the information you provide, such as your name, email address, chat log and information that you provide during the call, as well as, if necessary, information to verify your identity, in order to process your support request. At the same time, the above-mentioned technical information will be collected. (5.4) The legal basis for this processing is Art. 6 (1) (b) GDPR, insofar as it concerns the provision of online shop functions such as shopping cart, checkout, navigation and the fulfillment of your order or questions about your orders. (5.5) In other cases, the legal basis is our legitimate interest in the secure and trouble-free provision of our online shop and is therefore Art. 6 (1) (f) GDPR. (5.6) As described in the section on cookies, certain cookies are set by Shopify to enable Shopify to improve the platform and for us to further develop and adapt our product range and online shop. Based on the information in these cookies, Shopify creates reports and analyses on the use of the shop. Depending on whether you have given your consent to tracking in the consent banner, these cookies will be deleted when you close your browser window or stored until the end of the specified storage period. This affects the level of detail of the reporting and analysis. The legal basis is our legitimate interest or that of Shopify in these purposes and thus GDPR Art. 6 (1) (f) and, if applicable, your consent and thus GDPR Art. 6 (1) (a). Consent can be revoked at any time via the link in the footer of the website. (5.7) The use of cookies that are absolutely necessary for the functioning of our online shop is based on the legal basis of Section 25 (2) No. 2 TTDSG. Other cookies are only stored with your consent; the legal basis in this case is Section 25 (1) TTDSG in conjunction with GDPR Art. 6 (1) (a). Consent can be revoked at any time via the link in the footer of the website. (5.8) To the extent that Shopify processes your data for the use of such Shopify offers that involve a direct customer relationship between you and Shopify, Shopify does so under its own responsibility. Information about this processing can be found in Shopify's privacy policy: https://www.shopify.de/legal/datenschutz (5.9) To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology. (5.10) We have commissioned the service provider HASH-COM GmbH with the development and administration of our website. HASH-COM GmbH therefore has access to the aforementioned technical data. To ensure compliance with data protection regulations, we have concluded a contract for data processing with HASH-COM GmbH. (6) USE OF COOKIES (6.1) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and associated with the browser you use. They allow certain information to be sent to the location that placed the cookie. Cookies cannot run programs or transmit viruses to your computer. If these cookies are not absolutely necessary for the operation of this website, they will only be stored once you have given your consent in the cookie banner displayed. In the case of this website, this is only the case in the online shop. (6.2) Cookies that are absolutely necessary for the website to function are stored on the legal basis of Section 25 (2) No. 2 of the German Telemedia Act (TTDSG). Other cookies are only stored with your consent; the legal basis in this case is Section 25 (1) TTDSG in conjunction with GDPR Art. 6 (1) lit. a. Consent can be revoked at any time via the link in the footer of the website. (6.3) This website uses the following types of cookies, the scope and functionality of which are explained below: Transient cookies (see 6.3.1) Persistent cookies (see 6.3.2) (6.3.1) Transient cookies are automatically deleted when you close your browser. This includes, in particular, session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. Session cookies also include the cookies we use to ensure the correct display of the website on the device used. Session cookies are deleted when you log out or close your browser. (6.3.2) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings. (6.3.3) Other technologies: These functions are not based on cookies, but on similar technical mechanisms, such as Flash cookies, HTML5 objects, or an analysis of your browser settings. This also means that we can use the technologies described below. Here, too, you can, of course, consent or object. (6.4) Mandatory functions that are technically necessary to display the website: The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (fully correctly) or the support functions could not be enabled. These are generally transient cookies that are deleted after your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the cookie overview, which you can view here. The legal basis for this processing is Art. 6 (1) (f) GDPR. (6.5) Optional cookies when you give your consent: We only set various cookies with your consent, which you can select when you first visit our website using the so-called cookie consent tool. The functions are only activated if you consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use it across different browsers or devices, to recognize you during a visit, or to display advertising (possibly also to tailor advertising to your interests, measure the effectiveness of ads, or display interest-based advertising). The legal basis for this processing is Art. 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the admissibility of processing up to the time of revocation. (6.6) The functions we use, which you can select and revoke individually via the Consent Manager, are explained in this privacy policy. (6.7) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that if you do this, you may not be able to use all functions of this website. (7) CONTACT VIA E-MAIL (7.1) When you contact us by email, the data you provide (your email address, your name and telephone number, if applicable, and your message) will be stored by us in order to answer your questions. We will delete the data collected in this context once storage is no longer required, or restrict processing if statutory retention periods apply. (7.2) We process this data in order to respond to your request. Data processing is carried out on a contractual basis (Art. 6 (1) (b) GDPR) insofar as it concerns questions relating to the purchase of our products. For the provision of customer service and the response to your inquiries, processing is based on legitimate interests (Art. 6 (1) (f) GDPR), as this enables satisfactory customer service. (8) NEWSLETTER (8.1) Our email newsletter is sent via »Klaviyo«, 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to which we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that the data is generally transferred to a Klaviyo server in the USA and stored there. Klaviyo uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to Klaviyo's own information, Klaviyo may use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for commercial purposes to determine which countries the recipients come from. However, Klaviyo does not use the data of our newsletter recipients to write to them directly or to pass it on to third parties. (8.2) To protect your data in the USA, we have a data processing agreement with Klaviyo, in which Klaviyo undertakes to protect our users' data, to process it on our behalf in accordance with its privacy policy, and, in particular, not to share it with third parties. You can view Klaviyo's privacy policy here: https://www.klaviyo.com/privacy (8.3) Registration data To subscribe to the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide your first and last name. This information is used solely to personalize the newsletter. Furthermore, we ask you to optionally provide your date of birth and title. We use this information solely to tailor the newsletter content to the interests of our readers. (8.4) Statistical surveys and analyses The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from the Klaviyo server when the newsletter is opened. During this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on the retrieval location (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor that of Klaviyo to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users. (8.5) Online access and data management There are cases in which we direct newsletter recipients to the Klaviyo website. For example, our newsletters contain a link that newsletter recipients can use to access the newsletter online (e.g. in the event of display problems in their email program). Furthermore, newsletter recipients can subsequently correct their data, such as their email address. Likewise, Klaviyo's privacy policy is only available on their website. In this context, we would like to point out that cookies are used on Klaviyo's websites and that personal data is therefore processed by Klaviyo, its partners and the service providers they use (e.g. Google Analytics). We have no influence on this data collection. You can find further information in Klaviyo's privacy policy. We would also like to draw your attention to the options for objecting to data collection for advertising purposes on the websites http://www.aboutads.info/choices and http://www.youronlinechoices.com (for Europe). (8.6) Cancellation/Revocation You can cancel your subscription to our newsletter here at any time, i.e. revoke your consent. This will also revoke your consent to its dispatch via Klaviyo and the statistical analyses. Unfortunately, a separate revocation of dispatch via Klaviyo or the statistical evaluation is not possible. You will find a link to cancel the newsletter at the end of each newsletter. (8.7) Legal basis General Data Protection Regulation In accordance with the provisions of the General Data Protection Regulation (GDPR), which came into force on May 25, 2018, we inform you that consent to the dispatch of email addresses is based on Art. 6 (1) (a) and (7) GDPR and Section 7 (2) No. 3 or (3) UWG. The use of the dispatch service provider Klaviyo, the conduct of statistical surveys and analyses, and the logging of the registration process are based on our legitimate interests in accordance with Art. 6 (1) (f) GDPR. We are committed to providing a user-friendly and secure newsletter system that serves both our business interests and meets user expectations. We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements of Art. 21 GDPR. This objection may be made, in particular, to processing for direct marketing purposes. You can unsubscribe from the newsletter at any time and can do so either by sending a message to berseegmbh@gmail.com or via a link provided for this purpose in the newsletter. (8.8) We regularly review whether further storage of email addresses in our mailing list is necessary. In particular, we delete undeliverable or unsubscribed addresses. If you revoke your consent, we will delete your consent and email address, as well as the associated user data, after three years at the latest. Further storage is based on our legitimate interest in being able to prove, in the event of any legal disputes, that consent was given at the time of sending, and thus on the basis of Art. 6 (1) (f) GDPR.