We are pleased that you are interested in us and our products.

This data protection declaration describes how STYLIQUE GmbH (“we”) collect and process your personal data.

The data protection and privacy of the users of our website are of particular concern to us. We therefore undertake to protect your personal data and only collect, process and use it in accordance with the General Data Protection Regulation (GDPR) and national data protection regulations. The following data protection declaration explains which of your personal data is collected on our website and how this data is used. Our data protection declaration is regularly updated in accordance with legal and technical requirements. Therefore, please note the current version of our data protection declaration.

The following data protection regulations apply exclusively to the Internet pages of STYLIQUE GmbH on the website and related subpages of: www.stylique.de.

I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws as well as other data protection regulations is:

STYLIQUE GmbH

Erkrather Straße 365

40231 Düsseldorf

Germany

tel.: +49 211 9367 5050

email:[email protected]

website: www.stylique.de

II. General information on data processing

1. Scope of processing of personal data

Your personal data will only be processed insofar as this is necessary to provide a functional website and our content and services. Processing takes place regularly only with your consent, unless prior consent cannot be obtained for actual reasons and the processing of the data is permitted by statutory provisions.

2. Legal basis for the processing of personal data

As a legal basis for the processing of personal We use the facts standardized in Art. 6 Para. 1
DS-GVO as follows:

1. Art. 6 Para. 1 lit. a DS-GVO, provided that we obtain the consent of the person concerned for the processing of personal data.
2. Art. 6 Para. 1 lit. b DS-GVO, if the processing of personal data is necessary to fulfill a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures. sind.
3. Art. 6 Para. 1 lit. c GDPR, if processing of personal data is necessary to fulfill a legal obligation to which our company is subject.
4. Art. 6 Para. 1 lit. d DS-GVO, if vital interests of the data subject or another natural person require the processing of personal data.
5. Art. 6 Para. 1 lit. f DS-GVO, if the processing is necessary to protect a legitimate interest of our company or a third party and this outweighs the interests, fundamental rights and fundamental freedoms of the person concerned.

3. Data erasure and retention period

As soon as the purpose of storage no longer applies, your personal data will be deleted or blocked. If the European or national legislator provides for storage beyond the purpose in EU regulations, laws or other regulations to which the person responsible is subject, this can take place until the end of the storage period prescribed by the standards mentioned. The data will then also be blocked or deleted, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

III. PREPARATION OF THE WEBSITE AND CREATION OF LOGFILES

1. Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer by automatically sending information to our server through the browser used on your end device Internet pages are sent. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted:

1. The user IP address
2. Date and time of access
3. Information about the access browser type and version used
4. Your operating system
5. Websites from which your system accesses our website (referrer URL) t
6. Websites that your system accesses via our website
7. The request lineh) status codes
8. The size of the response body
9. Name and URL of retrieved file

This data is also stored in the log files of our system. This data is not stored together with your other personal data.

2. Legal basis for data processing

Art. 6 (1) lit. f GDPR represents the necessary legal basis for the temporary storage of the data and the log files

3. Purpose of data processing
Purpose of data processing is:

1. - Ensuring smooth connection establishment of the websites
2. - Ensuring comfortable use of our websites
3. - Evaluation of system security and stability
4. - Other administrative purposes

The provision of the website to your computer requires the temporary storage of the IP address by the system. To do this, your IP address must be saved for the duration of the session.

To ensure the functionality of the website and the security of our IT systems as well as to optimize the website, this data is stored in log files. In this context, there is no evaluation of the data for marketing purposes.

These purposes also represent our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR.

The legal basis for data processing is Art. 6 Para. 1 Sentence 1 f) GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations in this regard under Sections IV. It is necessary to provide a valid e-mail address so that we know who sent the request in order to be able to answer it. Further information can be provided voluntarily. Data processing for the purpose of establishing contact takes place in accordance with Art. 6 Para. 1 Sentence 1 a) GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been dealt with.

The legal basis for data processing is Art. 6 Para. 1 Sentence 1 f) GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations in this regard under Sections IV. It is necessary to provide a valid e-mail address so that we know who sent the request in order to be able to answer it. Further information can be provided voluntarily. Data processing for the purpose of establishing contact takes place in accordance with Art. 6 Para. 1 Sentence 1 a) GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been dealt with.

4. Duration of storage

If the data collection is no longer necessary to achieve the purpose, the data will be deleted. When data is collected to provide the website, this happens at the end of the respective session.

If the data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this may also be possible. For this purpose, the user IP addresses are deleted or alienated in order to no longer allow an assignment to the calling client.

5. Objection and elimination possibility

You have no possibility of objection, since the data collection and storage in log files for provision and operation of the website are mandatory.

IV. Use of cookies

1. Description and scope of data processing

Our website uses so-called cookies. These are text files that are stored in the internet browser or by the internet browser on your computer system. A cookie can be stored on your operating system as soon as it calls up a website. This cookie contains a characteristic character string that enables the browser to be clearly identified when the website is called up again.

Cookies are used to make our website user-friendly. Because some parts of our website require identification of the browser used even after a page change.

In addition, we use cookies on our website to analyze your surfing behavior. The user data collected in this way is pseudonymised using technical precautions. This means that the data can no longer be assigned to you. The data is not stored together with your other personal data.

When you visit our website, we inform you about the use of cookies for analysis purposes by means of an information banner. We refer to this data protection declaration. The info banner also has two buttons. By clicking on reject you prohibit the use of analysis cookies and by clicking on accept you agree to this use.

Our website is mainly provided via our own content management system. If you would like further information on this, in particular on the use of cookies, you can obtain this from [email protected]

2. Prevent storage of cookies

Depending on the browser used, you can set that cookies are only stored according to your consent is given. If you only want to accept the cookies we use, but not the cookies of any service providers and partners, you can select the 'Block third-party cookies' setting in your browser. As a rule, the help function in the menu bar of your web browser shows you how to reject new cookies and switch off those that have already been received. We recommend that you always log out completely on shared computers that are set to accept cookies and flash cookies. Complete deactivation of cookies may mean that you cannot use all the functions of our website.

3. Legal basis for data processing

Depending on the browser used, you can set that cookies are only stored according to your consent is given. If you only want to accept the cookies we use, but not the cookies of any service providers and partners, you can select the 'Block third-party cookies' setting in your browser. As a rule, the help function in the menu bar of your web browser shows you how to reject new cookies and switch off those that have already been received. We recommend that you always log out completely on shared computers that are set to accept cookies and flash cookies. Complete deactivation of cookies may mean that you cannot use all the functions of our website.

4. Purpose of data processing

Technically necessary cookies are used to simplify the use of our website for you. Various functions of our website cannot be offered without the use of cookies, as these require the browser to be recognized after a page change.

The following applications, among others, require cookies:

1. Remembering search terms
2. Adoption of language settings
3. Shopping cart

User profiles are not created using user data collected by technically necessary cookies.

Analysis cookies are used for the purpose of optimizing the quality of our website and its content. We can regularly improve our offer by using analysis cookies and learning how our website is used.

These purposes also represent our legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f of the GDPR.

5. Duration of storage, possibility of objection and removal

Cookies are stored on your computer. From there they are transmitted to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. You can also delete cookies that have already been saved at any time. This can also be done automatically. If you deactivate cookies for our website, this may result in restrictions on the use of the functions of our website.

You can also prevent any transmission of Flash cookies by changing the settings of the Flash Player, but not via the settings of your Internet browser.

V. Newsletter

1. Description and scope of data processing

On our website we offer the possibility of a free newsletter subscription. For this we use the marketing tool Hubspot. You can find more information about Hubspot under VIII. Forwarding of your data to third parties / external services of this data protection declaration.

When registering for the newsletter, the following data is collected via the input mask provided for this purpose:

1. Vorname
2. Nachname
3. Ihre E-Mail-Adresse

When registering, further data can also be collected and stored, for example the date and time of the Registration or IP address of the calling computer.

During the registration process, we obtain your consent to the processing of this data

If you purchase goods or services on our website and enter your e-mail address, we can then use it to send you a newsletter. This newsletter is sent exclusively for direct advertising of our own similar goods or services.

The data will only be used to send the newsletter. The data processed for sending the newsletter will not be passed on to third parties.

If you have given your express consent in accordance with Art. 6 Para. 1 Sentence 1 a) GDPR, we will use your e-mail address to send you our newsletter on a regular basis to send. In order to receive the newsletter, it is sufficient to provide an e-mail address.

2. Legal basis for data processing

For the processing of personal data after the user has registered for the newsletter, consent in accordance with Art. 6 Para. 1 lit. a GDPR provides the necessary legal basis [§ 7 Para. 3 UWG represents the necessary legal basis for the newsletter dispatch due to the sale of goods or services.

For the newsletter dispatch due to the sale of goods or services, § 7 Para. 3 UWG represents the necessary legal basis.

3. Purpose of data processing

We collect your e-mail address in order to deliver the newsletter.

To prevent misuse of the services or the email address provided, we collect other personal data during the registration process.

4. Duration of storage

If the data collection is no longer necessary to achieve the purpose, the data will be deleted. We therefore save your e-mail address for the duration of the active newsletter subscription.

Other personal data collected during the registration process is usually deleted after a period of seven days.

5. Possibility of objection and removal

You can unsubscribe from the newsletter at any time, e.g. via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request at any time to [email protected] by e-mail. You will find a corresponding button or link in every newsletter.

You can also use this to consent to the storage of other personal data collected during the registration process revoke data.

VI. E-MAIL-KONTAKT

1. Description and Scope of data processing

You can contact us via the email address provided on our website. Your personal data transmitted with the e-mail will be saved.

The data will only be used to process the communication. The data processed for communication will not be passed on to third parties.

2. Legal basis for data processing

If the personal data is transmitted via email, Art. 6 Para. 1 lit. f GDPR represents the necessary legal basis for the processing of the data If you intend to conclude a contract, Art. 6 Para. 1 lit. b GDPR also represents the necessary legal basis for processing to process the contact. This also includes the required legitimate interest in the processing of the data.

3. duration of storage

Other personal data collected during the registration process is usually deleted after a period of seven days.0

4. Other personal data collected during the registration process is usually deleted after a period of seven days.1

If the data collection is no longer necessary to achieve the purpose, the data will be deleted. This is the case for the personal data sent by e-mail when the respective communication with you has ended. This is the case if the circumstances indicate that the facts in question have been finally clarified.

5. Widerspruchs- und Beseitigungsmöglichkeit

If you contact us by e-mail, you can object to the storage of your personal data at any time. Please note that in this case further communication with you can no longer be continued.

Please send your objection to the e-mail address [email protected], stating your first and last name.

Personal data stored for the purpose of establishing contact will be completely deleted in this case.

VII. ONLINE-SHOP

1. Description and scope of data processing

You can place orders via our online shop on our website by providing personal data and thus initiate or conclude contracts with us. To order, enter your data for the conclusion of the contract in an input mask. Mandatory information required for the processing of the contracts is marked separately, further information is voluntary. Your payment details may be passed on to process your order.

The following data may be collected as part of the ordering process:

1. Name
2. Address
3. Telephone number
4. E-mail address
5. Credit information

During the ordering process, other data can also be collected and stored, for example the date and time of registration or the IP address of the calling computer.

To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted using SSL technology.

2. Legal basis for data processing

Article 6 (1) (b) GDPR provides the necessary Legal basis, insofar as this serves to fulfill a contract with you or to carry out pre-contractual measures.

3. Purpose of data processing

In order to fulfill the contract with you or to carry out pre-contractual measures, it is necessary to enter your personal data in the input mask. This is the only way we can ensure legally compliant contract processing, in particular the associated delivery of goods to the desired address and the payment you owe in return.

4. Duration of storage

If the data collection is no longer necessary to achieve the purpose, the data will be deleted . This is the case for the data collected during the ordering process to fulfill a contract or to carry out pre-contractual measures if they are no longer required for the execution of the contract. On the basis of contractual or legal obligations, your personal data can also be stored after the contract has been concluded

5. Possibility of objection and removal

You can have the data stored about you changed at any time. If the data is used to fulfill a contract or to carry out pre-contractual measures, it can only be deleted prematurely, provided that there are no contractual or legal obligations to the contrary.

VIII. Weitergabe Ihrer Daten an Dritte / externe Dienste

So that we can make our website as pleasant and comfortable as possible for you as a user, we occasionally use the services of external service providers. Below you have the opportunity to find out about the data protection regulations for the deployment and use of the services and functions used, so that you may also exercise your rights with these service providers.

1. Google Analytics
2. Hubspot
3. Pinterest
4. Facebook
5. Amazon Web Services
6. Sendgrid
7. Stripe
8. PayPal
9. Cloudflare

1. Google Analytics

Google Analytics is a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View , CA 94043, United States ('Google'). Google Analytics uses 'cookies', i.e. text files that are stored on your computer and enable Google to analyze the use of our offer. The information collected by the cookie about the use of our website (including your IP address) is usually transmitted to a Google server in the USA and stored there.

Ihre IP-Adresse wird auf unsere Veranlassung hin von Google lediglich in gekürzter Form erfasst, was eine Anonymisierung gewährleistet und keine Rückschlüsse auf Ihre Identität zulässt. Im Falle der Aktivierung der IP- Anonymisierung auf unseren Webseiten, wird Ihre IP-Adresse von Google innerhalb von Mitgliedsstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt

Google wird die genannten Informationen verwenden, um Ihre Nutzung unserer Webseiten auszuwerten, um Reports über die Webseitenaktivitäten für uns zusammenzustellen und um weitere mit der Nutzung von Webseiten und Internet verbundene Dienstleistungen an uns zu erbringen. Die im Rahmen von Google Analytics von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. Eine Übertragung dieser Daten durch Google an Dritte findet nur aufgrund gesetzlicher Vorschriften oder im Rahmen der Auftragsverarbeitung statt. Keinesfalls wird Google ihre Daten mit anderen von Google erfassten Daten zusammenbringen.

Durch die Nutzung dieser Webseiten bzw. durch Klick auf Akzeptieren im Infobanner erklären Sie sich mit der Bearbeitung der über Sie erhobenen Daten durch Google und der zuvor beschriebenen Art und Weise der Datenverarbeitung sowie dem benannten Zweck einverstanden. Sie können die Speicherung der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern. Wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen unserer Webseiten vollumfänglich werden nutzen können

Nähere Informationen zu Google Analytics und Datenschutz finden Sie unterhttps://tools.google.com/dlpage/gaoptout?hl=de.

2. HubSpot

We use the HubSpot service on our website. HubSpot is a US software company with offices in Ireland. HubSpot, 2nd floor 30 North Wall Quay, Dublin 1, Ireland; Phone: +353 1 5187500 HubSpot offers software for online marketing, such as newsletters, customer/partner databases, customer service, emails, social media publishing and reporting, contact management, contact forms. These services enable visitors to our website to use the functions of our website and the services offered here, to download information and to make their own information available. This information and the content of our website are stored on Hubspot servers. They can be used by us to contact visitors and users of our website and to determine which of our company's services are of interest to them. All information we collect is subject to this Privacy Policy. We use all the information collected exclusively to optimize our website and our marketing and administrative measures.We also use HubSpot for our contact forms.The legal basis for processing is your consent in accordance with Article 6(1)(a) GDPR. If you do not want your data to be collected and processed via HubSpot, you can refuse your consent or withdraw it at any time. The personal data are kept for as long as they are necessary to fulfill the processing purpose. The data will be deleted as soon as they are no longer required to achieve the purpose. Data can be transmitted to the USA as part of processing via HubSpot. The security of the transmission is secured by so-called standard contractual clauses, which ensure that the processing of personal data corresponds to a security level that is equivalent to that of the GDPR. If these standard contractual clauses are not sufficient to establish an adequate level of security, your consent can serve as the legal basis for transmission to third countries in accordance with Article 49 (1) (a) GDPR

3. Pinterest

The Pinterest service is offered by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA. It is a social media platform. If you visit our website and are logged into your Pinterest account at the same time, Pinterest can directly assign your visit to our website to your Pinterest account. The use of our website is simplified and adapted to individual user requirements. If you do not want Pinterest to associate your data with your account, you must log out of your Pinterest account before visiting our website. We would like to point out that you use the services offered by Pinterest at your own risk and that we not all details of data processing at Pinterest are known. This applies in particular to the use of interactive functions such as sharing and commenting. For more information, please contact [email protected]

4. Facebook

The social network Facebook, including the Facebook Pixel service, is used on our website, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (Facebook). These services are operated by Facebook Inc. as a global company, which maintains various subsidiaries, e.g. in the EU Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, or for Germany the Facebook Germany GmbH, Caffamacherreihe 7, 20355 Hamburg.

When you visit our Facebook page, Facebook records, among other things, your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more information on this under the following link: ', so that the transmission of your personal data is permitted.https://www.facebook.com/help/pages/insights

The data collected about you in this context will be processed by Facebook Ireland Ltd. processed and possibly transferred to countries outside the European Union. Facebook describes in general terms what information Facebook receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and how to set up advertisements.

The data usage guidelines are available under the following link:

https://de-de.facebook.com/about/privacy

Facebook's full data guidelines can be found here:

https://de-de.facebook.com/full_data_use_policy

Regulations on joint responsibility with Facebook can be found here:

https://www.facebook.com/legal/terms/page_controller_addendum

How Facebook uses the data from visiting Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is available are passed on to third parties is not finally and clearly named by Facebook and is not known to us

When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to information from Facebook, this IP address is made anonymous (in the case of 'German' IP addresses) and deleted after 90 days. Facebook also stores information about its users' end devices (e.g. as part of the 'registration notification' function); Facebook may be able to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, there will be a cookie with your Facebook ID on your device. This enables Facebook to understand that you have visited this site and how you have used it. This also applies to all other Facebook pages. Facebook buttons integrated into websites enable Facebook to record your visits to these websites and assign them to your Facebook profile. This data can be used to offer content or advertising tailored to you.

If you want to avoid this, you should log out of Facebook or deactivate the 'remember me' function, delete the cookies on your device and close your browser and start again start. In this way, Facebook information that can be used to identify you directly is deleted. This allows you to use our Facebook page without revealing your Facebook ID. When you access interactive features of the site (like, comment, share, message, etc.), a Facebook login screen appears. After you have logged in, you can be recognized again by Facebook as a specific user.

You can find information on how to manage or delete existing information about you on the following Facebook support pages:https://de-de.facebook.com/about/privacy

You can also find this on our websites Facebook pixels, i.e. remarketing tags from Facebook, are used. When you visit our websites, these remarketing tags establish a direct connection between your browser and the Facebook server.

Facebook receives at least the information that you have visited our website with your IP address. In this way, Facebook can assign your visit to our website to your user account. We can use the information obtained in this way to display Facebook Ads. We would like to point out that we, as the provider of the pages, have no knowledge of the exact content of the transmitted data or how it is used by Facebook.

By using this website or by clicking on accept in the information banner, you consent to the processing of the data about you I agree to the data collected by Facebook in the manner and for the purposes set out above.

You can find setting options for advertising on Facebook under the following link:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

5. Amazon Web Services (AWS)

We use Amazon Web Services on our website. The provider of these services is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg. If you visit our website, your personal data will be processed on the AWS servers. Personal data can also be transmitted to the parent company of AWS in the USA. Data transfer to the USA is based on the EU standard contractual clauses. You can find more information here:https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/

Further information can be found in the AWS data protection declaration:
https://aws.amazon.com/de/privacy/?nc1=f

The use of AWS is based on Article 6 Paragraph 1 Letter F GDPR and the most reliable possible representation of our website and its functions. If a corresponding consent has been given, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit.a DSGVO. Consent can be revoked at any time.

6. Sendgrid

Our website uses the Sendgrid service to send emails and newsletters. The provider of this service is Sendgrid Inc., 1801 California Street, Suite 500, Denver, CO 80202, USA. Sendgrid is a service that is used, among other things, to organize and analyze the sending of emails and newsletters. The data entered by the users of the website for the purpose of receiving an e-mail or newsletter is stored on the SendGrid servers in the USA. If you do not wish SendGrid to carry out an analysis, you must unsubscribe from the newsletter. You will find a corresponding link for this in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

SendGrid enables us to analyze our newsletter campaign. For example, we can determine whether a newsletter message has been opened and which links have been clicked. Also, we can see if certain pre-defined actions have been performed after opening/clicking (conversion rate). For example, we can see whether you visited our website after clicking on the newsletter.

We are also able to divide the newsletter recipients into different categories (e.g. age, gender, etc.) so that the newsletter can be sent to the individual target groups can be addressed.

More information about the functions of Sendgrid can be found here: https://sendgrid.com/solutions/email-marketing/

7. Stripe

On our website we offer the option of making payments via the payment service provider Stripe, c/o Legal Process, 510 Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 Para. 1 lit. F GDPR). In this context, we pass on the following data to Stripe, insofar as it is necessary for the fulfillment of the contract (Art. 6 Para. 1 lit b. DSGVO):

1. Name des Kunden
2. E-Mail-Adresse
3. Kundennummer
4. Bestellnummer
5. Bankverbindung
6. Kreditkartendaten
7. Gültigkeitsdauer der Kreditkarte
8. Prüfnummer der Kreditkarte (CVC)
9. Datum und Uhrzeit der Transaktion
10. Transaktionssumme
11. Name des Anbieters
12. Ort

The processing of the data specified under this section is neither legally nor contractually required. But without the transmission of your personal data, we cannot process the payment via Stripe. Stripe is both the controller and the processor when it comes to data processing. As the controller, Stripe uses your transmitted data to fulfill regulatory obligations. This corresponds to Stripe's legitimate interest in accordance with Article 6 Paragraph 1 Letter F GDPR and serves to execute the contract in accordance with Article 6 Paragraph 1 Letter B GDPR. In this order processing relationship, Stripe acts exclusively according to our instructions and is contractually obliged to comply with the data protection regulations within the meaning of Art. 28 DSGVO. Your data will be stored by us until the payment processing has been completed. This includes the time it takes to process refunds, claims management and fraud prevention.Stripe has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses

You can find information on how you can object to Stripe at:https://stripe.com/privacy-center/legal

Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland

8. PayPal

On our website we offer the option of making payments via the payment service providers PayPal, PayPal Europe S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 Para. 1 lit. F GDPR). In this context, we pass on the following data to PayPal, insofar as it is necessary for the fulfillment of the contract (Art. 6 Para. 1 lit b. DSGVO):

1. Name des Kunden
2. Adresse des Kunden
3. E-Mail-Adresse
4. Telefonnummer

The processing of the data specified under this section is neither legally nor contractually required. But without the transmission of your personal data, we cannot carry out the payment via PayPal. PayPal carries out a credit check for various services such as payment by direct debit in order to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest in accordance with Article 6 (1) (f) GDPR and serves to execute the contract in accordance with Article 6 (1) (b) GDPR. Your data will be passed on to credit agencies for this purpose. We have no influence on this process and only receive the result as to whether the payment was made or rejected or whether a check is pending. Information on objection and removal options with regard to PayPal can be found at:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Your data will be stored by us until the payment has been processed . This also includes the period required for the processing of refunds, claims management and fraud prevention

PayPal is not a processor within the meaning of Art. 4 No. 8 DSGVO.

9. Cloudflare

We use the Content Delivery Network (CDN) from Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest in accordance with Article 6 (1) (f) GDPR. A CDN is a network of servers capable of delivering optimized content to website users. For this purpose, personal data can be processed in Cloudflare's server log files. Cloudflare is the recipient of your personal data and works for us as a processor. This corresponds to our legitimate interest within the meaning of Art. 6 Para. 1 S. 1 lit. f GDPR not to operate a content delivery network ourselves. You have the right to object to any processing. Whether the objection is successful must be determined within the framework of a weighing of interests. The processing of the data specified under this section is not required by law or contract. The functionality of the website is not guaranteed without processing. Your personal data will be stored by Cloudflare for as long as is necessary for the purposes described. Cloudflare has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Cloudflare processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses

For more information on how to object to and remove Cloudflare, please visit: [email protected]

IX. Rights of the data subject
If your personal data is processed, you are the data subject within the meaning of the GDPR. This gives you the following rights vis-à-vis the person responsible:', so that the transmission of your personal data is permissible.

1. Right to information

You can request confirmation from the person responsible as to whether we are processing personal data relating to you

If such processing has taken place, you have the right to request information from the person responsible about the following information in accordance with Article 15 GDPR :

key 'chapter9.part1.p3List (en)' returned an object instead of string.

1. the processing purposes;] ​​[the categories of personal data being processed;
2. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
3. if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this period;
4. the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the person responsible or a right to object against this processing;
5. the existence of a right of appeal to a supervisory authority;
6. if the personal data is not collected from the data subject, all available information about the origin of the data;
7. the existence of automated decision-making including profiling pursuant to Art. 22 para . 1 and 4 GDPR and - at least st in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
8. the existence of automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You can also request information as to whether your personal data is being transmitted to a third country or to an international organization. If this is the case, you can request information about the appropriate guarantees in connection with the transmission in accordance with Art. 46 GDPR.

2. Right to rectification

According to Article 16 GDPR, you can request the person responsible to correct incorrect personal data concerning you. Likewise, taking into account the purposes of the processing, you can request the completion of incomplete personal data - also by means of a supplementary declaration. The person responsible must make the requested correction immediately.

3. Right to erasure (right to be forgotten)

According to Art. 17 GDPR, you can request the person responsible to delete the personal data concerning you immediately and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

1. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed
2. You revoke your consent to which the processing was based pursuant to Article 6(1)(a) or Article 9 Para. 2 lit. a DSGVO and there is no other legal basis for the processing.
3. You object to the processing in accordance with Art. 21 Para. 1 DSGVO and there are no overriding legitimate reasons for the processing or you object pursuant to Art. 21 (2) DS-GVO objection to the processing
4. your personal data was processed unlawfully
5. The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible [Your personal data was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR
6. Your personal data was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR

If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Art. 17 Para. 1 DSGVO, he shall take appropriate measures, including technical ones, to protect the data controller, taking into account the available technology and the implementation costs , who process the personal data, that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data

However, the right to deletion does not exist if the processing is subsequently carried out is required

1. to exercise the right to freedom of expression and information;
2. to fulfill a legal obligation which requires processing under Union or Member State law to which the controller is subject or to perform a task that is in the public interest or in Public authority is exercised, which was transferred to the person responsible;
3. for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 DS-GVO;
4. for im archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. exercise or defense of legal claims
5. to assert, exercise or defend legal claims

4. Right to restriction of processing

According to Art. 18 GDPR, you can request the person responsible to restrict the processing of your personal data if one of the following conditions is met:

1. the accuracy of your personal data has been contested by you for a period enabling the controller to verify the accuracy of your personal data;
2. the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction the use of your personal data;
3. the person responsible no longer needs your personal data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
4. you have objected to the processing pursuant to Art. 21 para . 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh yours.

If the processing of your personal data has been restricted, this personal data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public be processed in the interests of the Union or a Member State.

If you have obtained restriction of processing in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.

5. Notification obligation

If you have asserted the rights described above to correction, deletion or restriction of processing against the person responsible, then according to Art. 19 DSGVO all recipients to whom your personal data have been disclosed have this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

At your request, the person responsible must inform you of these recipients.

6. Right to data transferability

According to Article 20 GDPR, you have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that

1. the processing is based on consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b GDPR GMO is based and
2. the processing is carried out using automated procedures.

When exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible.

The right to data portability does not apply to processing of personal data for it is necessary to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible.

Similarly, the rights and freedoms of other persons must not be impaired by the right to data portability

7. Right to object

You have the right pursuant to Art. 7 Para. 3 GDPR, for reasons arising from your particular situation, at any time against the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f GDPR occurs to file an objection; this also applies to profiling based on these provisions.

The person responsible will no longer process your personal data unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert , exercising or defending legal claims.

If your personal data is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In connection with the use of information society services Notwithstanding Directive 2002/58/EC, you can exercise your right to object by automated means using technical specifications

8. Right to revoke the declaration of consent under data protection law

You can revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation.

9. Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.

This does not apply , if the decision

1. is necessary for the conclusion or performance of a contract between you and the person responsible,
2. is permitted by law of the Union or the Member States to which the person responsible is subject and these legal provisions take appropriate measures to protect your rights and freedoms and your legitimate interests contain or
3. is permitted by law of the Union or the Member States to which the person responsible is subject and these legal provisions take appropriate measures to protect your rights and freedoms and your legitimate interests contain or

In the cases referred to under a) and c), the person responsible shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain human intervention on the part of the person responsible, to express his or her point of view and to contesting the decision.

The decisions according to a) to c) may not be based on special categories of personal data according to Art. 9 Para. 1 DS-GVO, unless Art. 9 Para. 2 lit. a or g DS-GVO applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.

The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR .

• Zuständige Aufsichtsbehörde:
• Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
• Postfach 20 04 44
• 40102 Düsseldorf
• Tel.: 0211/38424-0
• Fax: 0211/38424-999
• E-Mail: [email protected]

X data security

We use the common CloudFlare Flexible SSL method within the website visit in connection with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit V3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

XI. Updating and changing this data protection declaration

Diese Datenschutzerklärung ist aktuell gültig und hat den Stand August 2022

The further development of our website and its offers or changed legal provisions, or enacted case law or official requirements may make it necessary to change this data protection declaration. You can access and print out the current version of our data protection declaration at any time on the website at https://www.stylique.de/datenschutz.