Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other indication is made in the following processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information.
Every time you access our website, usage data is transmitted to us or our web hosting provider / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.

Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.

Contact

Controller

If you wish, you may contact us. The controller responsible for data processing is:
Kai Lindemann
Lindgesfeld 8h, 42653 Solingen, Germany
Phone: 02125990639
Email: info@kalishop.de

Use of WhatsApp Business

We offer our customers the option to make inquiries via WhatsApp Business for fast and direct communication. WhatsApp is a service provided by WhatsApp Ireland Limited (Meta Platforms Inc.).

When using WhatsApp Business, your phone number and the content of the communication are transmitted to WhatsApp and processed by WhatsApp. Processing may partly take place outside the European Union. We use WhatsApp Business exclusively to process your request and do not use your data for advertising or marketing purposes unless you have given us your explicit consent.

Further information on WhatsApp’s data processing can be found here:
https://www.whatsapp.com/legal/business-data-processing-terms

Initiating Contact by Email

If you initiate business contact with us via email, we will collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.

• If the contact serves to carry out pre-contractual measures (e.g., advice on purchase intentions, preparation of offers) or concerns an existing contract, processing is based on Art. 6(1)(b) GDPR.

• If the contact is made for other reasons, processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request.

You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.

We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Use of the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.

• If the contact serves to carry out pre-contractual measures or concerns an existing contract, processing is based on Art. 6(1)(b) GDPR.

• If the contact is made for other reasons, processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request.

We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Customer Account and Orders

Customer Account

When opening a customer account, we collect your personal data to the extent indicated. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing carried out before revocation. Your customer account will then be deleted.

Collection, Processing, and Disclosure of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and handle your inquiries. Providing the data is required for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is based on Art. 6(1)(b) GDPR.

Your data may be passed on, for example, to the shipping companies and dropshipping providers you select, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to a minimum.

Advertising

Use of Email Address for Newsletter Distribution

We use your email address, independent of contract processing, exclusively for our own advertising purposes for sending newsletters if you have expressly consented to this. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of processing carried out prior to revocation.

You can unsubscribe from the newsletter at any time via the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Your data will be transferred to an email marketing service provider as part of order processing. It will not be passed on to any other third parties.

Use of Email Address for Direct Advertising

We use your email address, obtained during the sale of a product or service, to send you electronic advertisements for our own products or services similar to those you have already purchased from us, provided you have not objected to this use.

Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct marketing. You can object to the use of your email address for this purpose at any time by notifying us.

Payment Service Providers

Use of Amazon Payments

We use Amazon Payments, a payment service of Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, L-1855 Luxembourg. The processing of your data is necessary to offer payments through Amazon Payments.

Further information can be found here:
https://pay.amazon.com/de/help/201212490

Use of SOFORT

For payment processing, we use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany), a company of the Klarna Group.

Further details can be found here:
https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/
and
https://www.klarna.com/sofort/

Cookies

Our website uses cookies. Cookies are small text files stored on the user's device by the browser. They enable recognition of the browser on subsequent visits and help us provide a better user experience.

You can manage, disable, or delete cookies at any time via your browser settings.

Technically Necessary Cookies

Unless otherwise stated in this privacy policy, we only use these technically necessary cookies to make our services more user-friendly, effective, and secure. Cookies also allow our systems to recognize your browser even after you change pages and to offer you services. Some features of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after changing pages.

The use of cookies or comparable technologies is based on § 25(2) TTDSG.
The processing of your personal data is carried out based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and providing a user-friendly and effective design of our offerings.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data.

Analytics and Advertising Tracking

Use of Google Analytics

We use the web analytics service Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. Google will use the information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage.

Data that may be collected includes:

• IP address

• Date and time of page access

• Click path

• Browser information

• Device information

• Pages visited

• Referrer URL (the website from which you accessed ours)

• Location data

• Purchase activities

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google Analytics uses technologies such as cookies, local browser storage, and tracking pixels to analyze your use of the website. The information generated about your use of this website is usually transmitted to a Google server in the USAand stored there.

Note: For the USA, there is no adequacy decision by the European Commission.
Data transfer takes place based on Standard Contractual Clauses (SCCs) as appropriate safeguards for protecting personal data.
Details: https://policies.google.com/privacy/frameworks

IP anonymization is activated on this website, meaning your IP address will first be shortened by Google within EU member states or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

Processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in designing the website in a needs-based and targeted manner. You have the right, for reasons arising from your particular situation, to object at any time to this processing.

Opt-out options:

• Browser add-on: https://tools.google.com/dlpage/gaoptout?hl=en

• Device-independent opt-out cookie: Available directly on our site.

More information on Google Analytics' terms of use and privacy policy can be found here:
https://www.google.com/analytics/terms/
https://policies.google.com/technologies/cookies

Use of Facebook Pixel

We use the remarketing function "Custom Audiences" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").

Meta Platforms Ireland and we are joint controllers for the collection and transfer of your data to Facebook when using this service.
Details on the joint processing agreement can be found here:
https://www.facebook.com/legal/controller_addendum

The purpose of this function is to target website visitors with interest-based advertising on Facebook. For this, the Facebook remarketing tag is integrated into the website, establishing a direct connection to Facebook servers when you visit the site. Facebook receives information about which of our pages you visited and associates it with your Facebook account.

If you visit the Facebook social network, you will then be shown personalized, interest-based ads.

Note: Your data may be transferred to the USA. Data transfer takes place based on Standard Contractual Clauses (SCCs). Details:
https://www.facebook.com/legal/EU_data_transfer_addendum

Processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in addressing website visitors with interest-based advertising. You have the right to object to this processing at any time.

More information on Facebook’s data collection and usage can be found here:
https://www.facebook.com/about/privacy/

Use of Google Ads Conversion Tracking

We use the online advertising program "Google Ads" and, in this context, conversion tracking by Google Ireland Limited.

When you click on a Google ad, a cookie for conversion tracking is placed on your device. These cookies are valid for a limited time, do not contain personal data, and therefore cannot be used for personal identification.

If you visit certain pages of our website and the cookie has not expired, Google and we can recognize that you clicked on the ad and were redirected to the respective page.

Each Google Ads customer receives a different cookie. Tracking across multiple websites is therefore not possible.

The information collected using conversion cookies serves to compile conversion statistics. We thus learn the total number of users who clicked on our ads and were redirected to a page with a conversion tracking tag. We do not receive any information that could personally identify users.

Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in targeted advertising.

More information can be found here:
https://business.safety.google/adscontrollerterms/
https://policies.google.com/privacy

Google reCAPTCHA

We use the Google reCAPTCHA service from Google Ireland Limited to distinguish between input made by a human or automated machine processing. The input you make is transmitted to Google and used there.

Additionally, your IP address and possibly other data required by Google for the reCAPTCHA service are transmitted to Google. Processing takes place within the EU but may also involve transmission to Google servers in the USA.

Data transfer takes place based on Standard Contractual Clauses (SCCs) as appropriate safeguards.
Details: https://policies.google.com/privacy/frameworks

Processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in protecting our website against automated surveillance, abuse, and spam.

More details on Google reCAPTCHA and Google’s privacy policy can be found here:
https://www.google.com/recaptcha/intro/android.html
https://www.google.com/privacy

Rights of the Data Subject

You are entitled, under the statutory provisions, to the following rights according to Art. 15 to 20 GDPR:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to data portability

Additionally, under Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for direct marketing purposes.

Storage Period

After complete contract fulfillment, your data will first be stored for the duration of the warranty period and then retained according to statutory, particularly tax and commercial, retention periods. After these periods expire, the data will be deleted unless you have consented to further processing and use.

Right to Lodge a Complaint

Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.

Right to Object

If your personal data is processed based on Art. 6(1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object at any time with future effect.

If you object, we will stop processing the affected data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If your personal data is processed for direct marketing purposes, you can object at any time by notifying us. After your objection, we will stop processing your data for such purposes.

Last updated: 29.11.2022