Datenschutzerklärung

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to any information that can be used to personally identify you.

1.2 The controller for the data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is Dennis Wegstein, Schloßstraße 141, 46535 Dinslaken, info@dennis-wegstein.com, 01756407991. The data controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, meaning when you do not register or provide us with other information, we only collect data that your browser transmits to the web server (so-called "server log files"). When you visit our website, we collect the following data that is technically required for us to display the website to you:

The website you visited
Date and time of access
Amount of data sent in bytes
Source/referral from which you accessed the page
Used browser
Used operating system
Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No further sharing or use of the data takes place. However, we reserve the right to review the server log files later if there are specific indications of unlawful use.

2.2 This website uses an SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the "https://" string and the lock symbol in your browser’s address bar.

3) Cookies

To make the visit to our website more attractive and enable the use of certain features, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.

If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, according to Art. 6 para. 1 lit. a GDPR in case of granted consent, or according to Art. 6 para. 1 lit. f GDPR for the protection of our legitimate interests in the best possible functionality of the website and a user-friendly and efficient design of the website visit.

You can configure your browser to be informed about the setting of cookies and to decide individually whether to accept them or to exclude the acceptance of cookies for specific cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting Us

4.1 Zendesk

To process customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland.

If you submit inquiries via email through our website, they will be stored and organized in the ticket system to ensure chronological processing and improve the service experience. You can always track the current status of your inquiry through the individually assigned ticket number.

For the organization and processing of inquiries, personal data will be collected based on the scope of your submission, but at least your first name, last name, and email address, which will be transmitted to the provider, stored, and accessed.

The legal basis for the processing of this data is our legitimate interest in efficiently organizing our customer service, answering your inquiry as quickly as possible, and optimizing our service offering, according to Art. 6 para. 1 lit. f GDPR.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized sharing with third parties.

4.2 Contacting Us via Contact Form or Email

When contacting us (e.g., via a contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your inquiry, and only to the extent necessary.

The legal basis for the processing of this data is our legitimate interest in responding to your inquiry, according to Art. 6 para. 1 lit. f GDPR. If your inquiry aims to enter into a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it is clear from the circumstances that the issue has been conclusively resolved and provided no statutory retention obligations exist.

5) Data Processing for Order Processing

5.1 Submission of Image Files for Order Processing via Upload Function

On our website, we offer customers the option to personalize products by submitting image files via an upload function. The submitted image is used as a template for the product's personalization.

Using the upload form on the website, the customer can send one or more image files directly via automated, encrypted data transmission from the device’s storage. We collect, store, and use the transmitted files solely for the purpose of creating the personalized product as described on our website. If the submitted image files need to be transferred to specialized service providers for production and order fulfillment, you will be explicitly informed in the following sections. No further transfer of data occurs. If the files or digital designs contain personal data (especially identifiable images of persons), all processing steps are carried out solely for the purpose of fulfilling your online order in accordance with Art. 6 para. 1 lit. b GDPR.

After completing the order processing, the submitted image files will be automatically and permanently deleted.

5.2 Data Transfer for Delivery and Payment Purposes

To fulfill contractual obligations related to delivery and payment, the personal data we collect will be forwarded to the respective transport company and the credit institution, as required, in accordance with Art. 6 para. 1 lit. b GDPR.

If we are obligated to provide updates for products with digital elements or digital products based on a corresponding contract, we will process the contact data (name, address, email) you provided at the time of order to inform you personally (via postal mail or email) about upcoming updates within the legally specified timeframe, in accordance with Art. 6 para. 1 lit. c GDPR. Your contact data will only be used for notifications about the updates we owe you and will only be processed to the extent necessary for that purpose.

To process your order, we also work with the following service providers who assist us in executing contracts, either wholly or partially. Certain personal data will be transmitted to these service providers as outlined in the following sections.

5.3 Data Sharing with Shipping Providers

To fulfill our contractual obligations to our customers, we work with external shipping partners. We provide the shipping partner with your name, delivery address, and, if required for delivery, your phone number, exclusively for the purpose of delivering the goods, as per Art. 6 para. 1 lit. b GDPR.

5.4 Sharing Personal Data with Shipping Service Providers

Deutsche Post

As a transport service provider, we use: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.

We transmit your email address and/or phone number to the provider prior to delivery to arrange a delivery appointment or announce the delivery, provided you have given explicit consent in the ordering process, in accordance with Art. 6 para. 1 lit. a GDPR. Otherwise, we only transmit the recipient’s name and delivery address to the provider, in accordance with Art. 6 para. 1 lit. b GDPR, for the purpose of delivery. The data is only shared to the extent necessary for the delivery of goods.

DHL

As a transport service provider, we use: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

GLS

As a transport service provider, we use: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1-7, 36286 Neuenstein, Germany.

Hermes

As a transport service provider, we use: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany.

Österreichische Post

As a transport service provider, we use: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria.

UPS

As a transport service provider, we use: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.

5.5 Use of Payment Service Providers (Payment Services)

Amazon Pay

On this website, one or more online payment methods from the following provider are available: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg.

If you choose a payment method from the provider that requires you to pay in advance (e.g., credit card payment), your payment data (including name, address, bank and card information, currency, and transaction number) and information about your order’s contents will be shared with the provider, according to Art. 6 para. 1 lit. b GDPR. The data is shared exclusively for the purpose of processing the payment and only to the extent necessary for this.

PayPal

On this website, one or more online payment methods from the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method from the provider that requires you to pay in advance, your payment data (including name, address, bank and card information, currency, and transaction number) and information about your order’s contents will be shared with the provider, according to Art. 6 para. 1 lit. b GDPR. The data is shared exclusively for the purpose of processing the payment and only to the extent necessary for this.

6) Web Analytics Services

6.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.

By default, when visiting the website, Google (Universal) Analytics sets cookies that are small text files stored on your device and collect certain information. This information includes your IP address, which is truncated by Google to exclude the last digits in order to prevent direct personal identification.

The information is transmitted to Google servers and processed there. Transfers to Google LLC, based in the USA, are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, generate reports on website activities for us, and provide other services related to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The data collected through the use of Google (Universal) Analytics will be stored for a period of two months and then deleted.

All of the above-described processing, especially setting cookies on the device used, will only occur if you have explicitly consented to this in accordance with Art. 6 (1) lit. a DSGVO. Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can revoke your consent at any time for the future. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized sharing with third parties.

Further legal information about Google (Universal) Analytics can be found at: https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites.

Demographic Features
Google (Universal) Analytics uses the "demographic features" function and can create statistics about the age, gender, and interests of site visitors. This is done by analyzing ads and information from third parties. This allows for the identification of target groups for marketing activities. However, the collected data cannot be attributed to any specific person and will be deleted after being stored for two months.

Google Signals
As an extension to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google, subject to your consent for the use of Google Analytics in accordance with Art. 6 (1) lit. a DSGVO, can analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the "Personalized Ads" function in your Google account settings. Please follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. More information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=de.

User IDs
As an extension to Google (Universal) Analytics, the "User ID" feature may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 (1) lit. a DSGVO, created an account on this website, and log in with this account on various devices, your activities, including conversions, can be analyzed cross-device.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

6.2 Hotjar

This website uses the web analytics service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as IP address and browser information, in order to evaluate statistical analyses of user behavior on our website and create pseudonymized usage profiles. This allows for the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). The pseudonymization generally excludes direct personal identification. A merger with other data collected about you does not take place.

All of the above-described processing, especially reading or storing information on the device used, will only be performed if you have explicitly consented to this in accordance with Art. 6 (1) lit. a DSGVO. You can withdraw your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized sharing with third parties.

7) Retargeting/Remarketing and Conversion Tracking

7.1 Facebook Pixel for Creating Custom Audiences

Within our online offering, we use the "Facebook Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").

If a user clicks on an ad we placed on Facebook, the "Facebook Pixel" expands the URL of our linked page with a parameter. This URL parameter is then entered into the user's browser after being redirected by a cookie set by our linked page.

As a result, Facebook can identify visitors to our online offer as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, we use the service to display the Facebook Ads we place only to Facebook users who have shown interest in our online offer or who have certain characteristics (e.g., interests in specific topics or products, determined by the visited websites) that we transmit to Facebook (so-called "Custom Audiences").

On the other hand, with "Facebook Pixel," it can be tracked whether users were redirected to our website after clicking on a Facebook ad and what actions they take there (so-called "Conversion Tracking").

The collected data is anonymous to us, meaning we cannot draw conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing it to be linked to the respective user profile, and Facebook can use the data for its own advertising purposes.

All of the above-described processing, especially setting cookies for reading information on the device used, will only be carried out if you have explicitly consented to this in accordance with Art. 6 (1) lit. a DSGVO. You can withdraw your consent at any time for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized sharing with third parties.

The information generated by Facebook is typically transmitted to a server of Facebook and stored there; this may also involve transmission to servers of Meta Platforms Inc. in the USA.

7.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

To this end, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising based on the pages you have visited using a pseudonymous cookie ID. Further data processing only takes place if you have agreed that your internet and app browsing history will be linked by Google to your Google account, and information from your Google account will be used to personalize the ads you view on the web. If you are logged into Google during your visit to our website, Google uses your data along with Google Analytics data to create and define target group lists for cross-device remarketing. Your personal data is temporarily linked with Google Analytics data by Google for this purpose to create target groups. As part of the use of Google Ads Remarketing, personal data may also be transferred to Google LLC servers in the USA.

All of the above-described processing, especially setting cookies to read information on the device used, will only be performed if you have explicitly consented to this in accordance with Art. 6 (1) lit. a DSGVO. Without this consent, the use of retargeting technology will not occur during your site visit.

You can withdraw your consent at any time for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.

7.3 Pinterest Retargeting Pixel

This website uses retargeting technology from the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

This enables us to target visitors of our website with personalized, interest-based advertising who have already shown interest in our shop and products. The display of ads is based on cookie-based analysis of past and current usage behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests, and the ads are tailored based on this stored information. These cookies are small text files that are stored on your computer or mobile device. You will see ads that are likely to match your product and informational interests.

All of the above-described processing, especially setting cookies to read information from the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of retargeting technology will be omitted during your visit to the site.

You can withdraw your consent at any time with effect for the future. To withdraw, please disable this service in the "Cookie Consent Tool" provided on the website.

8) Site Functionalities

Online Applications via a Form

We currently have open job positions listed on our website in a separate section, where interested parties can apply via a corresponding form.

Applicants must provide all personal data required for a well-founded evaluation, including general information such as name, address, and contact details, as well as performance-related evidence and, if necessary, health-related information. Further details about the application can be found in the job advertisement.

Upon submitting the form, applicant data will be transmitted to us securely using current technology, stored, and processed exclusively for the purpose of evaluating the application. The processing is carried out based on Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), as the application process is considered the initiation of an employment contract.

If, during the application process, special categories of personal data as defined in Art. 9 para. 1 GDPR (e.g., health data like information about disability status) are requested, the processing will be in accordance with Art. 9 para. 2 lit. b. GDPR to enable us to exercise rights arising from labor law and social security and social protection law, and to fulfill our obligations in this regard.

Cumulatively or alternatively, processing of special categories of data can also be based on Art. 9 para. 1 lit. h GDPR if it is for purposes of health care or occupational medicine, for evaluating the applicant's fitness for work, for medical diagnostics, care or treatment in the health or social sector, or for managing systems and services in the health or social sector.

If an applicant is not selected, or if they withdraw their application, their submitted data, as well as all electronic correspondence, including the application email, will be deleted no later than six months after notification. This period is based on our legitimate interest in answering any follow-up questions regarding the application and fulfilling our obligation to document compliance with equal treatment regulations for applicants.

In the event of a successful application, the data provided will be processed based on Art. 6 para. 1 lit. b GDPR (when processing in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of carrying out the employment relationship.

9) Tools and Others

9.1 DATEV

For bookkeeping, we use the cloud-based accounting software service from the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany.

The provider processes incoming and outgoing invoices as well as possibly the bank transactions of our company to automatically capture invoices, match them with transactions, and generate financial accounting in a semi-automated process.

If personal data is processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in efficiently organizing and documenting our business transactions.

9.2 Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users upon page load in the form of an interactive interface, where users can grant consent for specific cookies and/or cookie-based applications by ticking checkboxes. This ensures that consented cookies/services are only loaded if the user has given the corresponding consent by ticking the checkbox. This ensures that cookies will only be set on the user's device if they have consented.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (e.g., IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is carried out in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and therefore in a legally compliant design of our website.

Another legal basis for processing is also Art. 6 para. 1 lit. c GDPR. As controllers, we are legally obligated to make the use of technically unnecessary cookies dependent on user consent.

If required, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

Further information about the operator and the configuration options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

10) Rights of the Data Subject

10.1 The applicable data protection law grants you the following rights in relation to the processing of your personal data by the controller (access and intervention rights), with the respective exercise conditions referred to the applicable legal basis:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A LEGITIMATE INTEREST PURSUANT TO A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING MAY BE PRESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

11) Retention Period of Personal Data

The retention period for personal data depends on the respective legal basis, the processing purpose, and, if applicable, the statutory retention periods (e.g., commercial and tax law retention periods).

For the processing of personal data based on explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the affected data will be stored as long as you have not withdrawn your consent.

If there are statutory retention periods for data processed as part of contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods, unless it is still needed for contract fulfillment or initiation, or if we have a legitimate interest in retaining it.

For processing personal data based on Art. 6 para. 1 lit. f GDPR, the data will be stored as long as you do not exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

For processing personal data for direct marketing purposes based on Art. 6 para. 1 lit. f GDPR, the data will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.

Unless specified otherwise in this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.