Privacy Policy

1. Name and contact details of the controller

This data protection information applies to data processing by:
Data Controller: Dirk Hoch ('DH'),
Address: Vaalser Str. 97, 52074 Aachen
VAT ID No. DE 815 394 858
The contact person for data protection issues is Mr. Dirk Horch.

2. The collection and storage of personal data, as well as its nature and purpose, are straightforward. Merely by accessing our website, your browser will automatically send information to our website's server at www.bauchladenmanufaktur.de. This information is temporarily stored in what is known as a log file. The following details are collected without any action on your part and are stored until they are automatically deleted.
stored:
• IP address of the requesting computer,
• date and time of access,
• Name and URL of the retrieved file,
• Website from which the access is made (referrer URL),
• browser used and, if applicable, the operating system of your computer as well as the name of your access Provider.
The aforementioned data will be processed by us for the following purposes:
• Ensuring a smooth connection to the website,
• Ensuring comfortable use of our website,
• Evaluating system security and stability, as well as for various administrative tasks.
The legal foundation for processing data is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes of data collection as outlined above. We never use the collected data to infer personal details about you. Furthermore, we employ cookies and analytical services during your visit to our website. Detailed explanations are provided in sections 8 and 9 of this Privacy Policy.

3. The collection and storage of personal data, along with understanding its nature and purpose, are crucial aspects to consider during registration.
During registration, we retain the information specified in section 2.
• Date and time of registration
• First name, last name
•Email
•Password
•Telephone
Our terms and conditions, valid at the time, are securely stored. The registration form is encrypted, ensuring that third parties cannot access the data entered. You have the option to view and amend your registration data at any time.
We retain this data to offer you ordering capabilities and to ensure anytime access to your order details. The stored order data includes your orders, account information, address book, password, newsletter subscription, user data, and your reviews.
Data processing is conducted upon your request and complies with Art. 6 para. 1 sentence 1 lit. b GDPR. This is necessary for the purposes stated above, to properly process your orders and subscriptions, and to fulfill the mutual obligations from the order contracts.
If you have entered into a contract with us for the purchase of goods, your data will be stored according to the duration specified in section 4 - Online Ordering. If you have not made a purchase, we will retain your registration data for a reasonable period during which an order is anticipated post-registration, but not exceeding three months.

4. The collection and storage of personal data, along with the nature and purpose of their use, are crucial considerations when ordering online.
Online orders can be placed exclusively by individuals who have completed the registration process. Consequently, we retain the information detailed in sections 2 and 3. Our order form is encrypted, ensuring that third parties cannot view the data entered. Additionally, we collect the following information upon order placement:
• Salutation, first name, last name,
•E-mail address
•Address
•Telephone number
• Date and time of the order
• Ordered goods
•Account
• Details of the payment method
We also store the text of the contract and our policies applicable at the time of conclusion of the contract.
TERMS.
This data is collected:
• to be able to identify you as our customer,
• To be able to deliver the ordered goods to you and to perform the contract
• for invoicing
• To settle payment claims and assert any other claims
against you
• To correspond with you
Data processing is conducted upon your request and falls under the specified categories in accordance with Art. 6(1)(b) of the GDPR, necessary for the reciprocal fulfillment of obligations from the purchase agreement.
The personal data we collect to fulfill the purchase contract will be processed until the statutory limitation period expires (3 years after the end of the calendar year in which the claim arose, and the creditor became aware, or should have become aware without gross negligence, of the circumstances leading to the claim and the debtor's identity, as per § 199 para. 1 BGB). After this period, the data will be deleted unless we are required to retain it under Article 6 (1) sentence 1 lit. c GDPR due to tax and commercial law retention and documentation duties (as stipulated by the German Commercial Code (HGB), the German Criminal Code (StGB), or the German Fiscal Code (AO)), or you have agreed to longer storage per Art. 6 para. 1 sentence 1 lit. a GDPR.

5. The collection and storage of personal data, along with the nature and purpose of their use, occur upon subscription to our newsletter.
IIf you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address to send you our newsletter regularly. Providing an email address is sufficient to receive the newsletter. You may unsubscribe at any time, for instance, by clicking a link at the end of each newsletter. Alternatively, you are welcome to unsubscribe at any time using our contact form.

6. The collection and storage of personal data, as well as the nature and purpose of its usage, are crucial factors when using our contact form. If you have any inquiries, you can reach us through the form available on our website. A valid email address is essential for us to identify the requester and respond accordingly. You may voluntarily provide additional information. The processing of data for contacting us complies with Art. 6(1)(a) of the GDPR, based on your freely given consent. The personal data we collect via the contact form will be automatically deleted after addressing your request. Our contact form is encrypted, ensuring that third parties cannot view the data you enter.

7. Disclosure of data
A transfer of your personal data to third parties for purposes other than those listed below
purposes does not take place.
We will only share your personal information with third parties if:
• this is legally permissible and in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationship with you. In doing so, we use the information provided by you
Data provided:
• To fulfil and process your order,
• Your data will be passed on to the person commissioned with the delivery.
shipping companies, insofar as this is necessary for the delivery of the goods,
• To process payments, whereby we may transfer your payment details to our
house bank.
• The disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the purpose of asserting, exercising or defence of legal claims and there is no reason to assume that
that you have an overriding interest worthy of protection in the non-disclosure of your data have
• there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR,
• you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR to how
for example, when applying for a purchase in instalments (instalment payment transaction). At
In the case of an instalment payment transaction, you give your consent to the payment of instalments by submitting the application.
Transmission of your data to PayPal for credit checks. For the purpose of credit checks
your data collected in this respect, first and last name, street, house number,
postcode, city, date of birth, telephone number, as well as the data related to your
Order stored, processed and used to the extent permitted by law. They
agree that this data will be transmitted to PayPal for the purpose of credit checks.
Any other disclosure of your data to other third parties or use for advertising purposes
outside of a consented newsletter dispatch. Insofar as we transfer your data to third parties such as
As set out above, these third parties have been carefully selected and commissioned by us to:
are bound by our instructions and are regularly monitored.
Insofar as our service providers or partners are based in a country outside the European Union,
Economic Area (EEA), we would like to inform you of the consequences of this circumstance in the
Description of the offer. We will only transmit your data to a service provider or
Partners outside the EEA, if the delivery location you specified in your order is
outside the EEA. We transmit your data to service providers or partners outside the
EEA, if an adequacy decision of the Commission exists for the country in question. In case
of a transfer pursuant to Art. 46 or Art. 47 or Art. 49 para. 1 subparagraph 2, we inform you
about the consequences of this circumstance in the offer. For the following countries,
adequacy decisions of the Commission before: Andorra, Argentina, Canada (commercial
organisations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay,
USA (limited to the Privacy Shield framework). The Commission's comments on its
Adequacy decisions can be found at: https://ec.europa.eu/info/law/law-topic/dataprotection/
data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_de
Explanations and explanations of the EU-US Privacy Shield can be found at:
https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacyshield_
en

8. Cookies
We utilize cookies to design and optimize our website. Cookies are small text files stored on your hard drive by the browser you are using. The entity that sets the cookie receives certain information. Cookies cannot execute programs or transfer viruses to your computer. Their purpose is to make the website more user-friendly and efficient overall. Below, we explain the types of cookies we use, along with their scope and functionality.
– Transient cookies (see a)
– Persistent cookies (see b).
a) Transient cookies, particularly session cookies, are automatically deleted when you close your browser. They store a session ID, allowing different requests from your browser to be linked to the same session. This way, your computer can be recognized when you revisit our website. Session cookies are removed when you log out or close the browser.
b) Persistent cookies are deleted automatically after a predetermined duration, which varies per cookie. You can delete cookies at any time using your browser's security settings.
You have the option to configure your browser settings according to your preferences, for example, by rejecting third-party cookies or all cookies. Please note that you might not be able to use all features of this website if you do so.
Cookies are utilized to recognize you on future visits.
The processing of data by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties according to Art. 6(1) sentence 1 lit. f GDPR.

9. Analysis Tools
Tracking-Tools
The tracking measures listed below and used by us are based on
basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the
tracking measures, we want to ensure a needs-based design and continuous optimisation
of our website. On the other hand, we use the tracking measures to
use of our website and for the purpose of optimising our
offer for you. These interests are considered legitimate within the meaning of the above-mentioned
provision. The respective data processing purposes and categories of data
can be found in the corresponding tracking tools.
Google Analytics
For the purpose of needs-based design and continuous optimisation of our pages, use
Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/
intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as
"Google"). In this context, pseudonymised user profiles are created and cookies are used.
(see point 8). The information generated by the cookie about your use
of this website, such as
• Browser type/version
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request,
are transmitted to a Google server in the USA and stored there. The information
are used to evaluate the use of the website, to compile reports on the
website activities and to provide further information related to the use and enjoyment of the website.
services related to the use of the Internet for the purposes of market research and
needs-based design of these Internet pages. Also, this information will be
may be transferred to third parties if required to do so by law or if third parties
process this data on behalf of the company. Under no circumstances will your IP address be linked to any other data of
Google. The IP addresses are anonymized so that an assignment is not possible.
(IP masking). You can control the installation of cookies by making an appropriate
prevent the setting of the browser software; however, we would like to point out that in this case
It may not be possible to use all the functions of this website to their full extent.
In addition, you can request the collection of information generated by the cookie and related to your use of the
website-related data (including your IP address) as well as the processing of this data by Google.
by downloading and installing a browser add-on
(https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, in particular
for browsers on mobile devices, you can also opt out of the collection by Google Analytics
by clicking on this link. An opt-out cookie will be set, which will allow the future
The collection of your data when you visit this website. The opt-out cookie is only valid in this case.
browser and only for our website and will be placed on your device. Delete the cookies in
browser, you will need to set the opt-out cookie again. For more information on the
Data protection in connection with Google Analytics can be found in the Google Analytics Help Center, for example
(https://support.google.com/analytics/answer/6004245?hl=de).

10. Rights of data subjects
You have the right to:
• in accordance with Art. 15 GDPR, information about your personal data processed by us
demand. In particular, you can obtain information about the purposes of the processing, the category of
personal data, the categories of recipients to whom your data will be disclosed.
have been or will be disclosed, the envisaged storage period, the existence of a right to
rectification, erasure, restriction of processing or objection, the existence of a
right to lodge a complaint with a supervisory authority, the origin of their data, if it is not received by us.
as well as on the existence of a Automated decision-making
including profiling acc. Article 22(1) and (4) of the GDPR and meaningful information on the
the logic involved, as well as the scope and intended effects of such a
Processing for the data subject. You have the right to request information as to whether:
transfer your personal data to a third country or to an international
organisation. In this context, you may request to be informed about the
appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer of
become;
• in accordance with Art. 16 GDPR, immediately correct or complete your
request personal data held by us;
• In accordance with Art. 17 GDPR, you can request the deletion of your data from us in the following cases.
personal data stored:
• the personal data concerning you are necessary for the purposes for which they were collected.
collected or otherwise processed, is no longer necessary.
• You revoke your consent to which the processing pursuant to Art. 6 (1) (a) is based.
or Art. 9(2)(a) GDPR, and there is no other way to do so
Legal basis for processing.
• You object to the processing in accordance with Art. 21 (1) GDPR and
there are no overriding legitimate grounds for the processing, or which you
object to the processing in accordance with Art. 21 (2) GDPR.
• your personal data has been unlawfully processed.
• the deletion of your personal data is necessary for the fulfilment of a
legal obligation under Union law or the law of the Member States
to which the controller is subject
• the personal data concerning you has been processed in relation to the services offered.
information society services pursuant to Article 8(1) of the GDPR;
If the controller has made the personal data concerning you public and is
pursuant to Art. 17 para. 1 GDPR, it shall take into account the
technology and implementation costs, including measures commensurate with the costs of implementation. Of a technical nature, in order to identify data controllers, dhe personal data
to inform them that you, as a data subject, have requested the deletion of all data
links to such personal data or copies or replications of such
personal data.
The right to erasure does not exist insofar as the processing is necessary
• to exercise the right to freedom of expression and information;
• for compliance with a legal obligation requiring processing under the law of the
Union or the Member State to which the controller is subject, or
for the performance of a task carried out in the public interest or in the exercise of
official authority vested in the controller;
• for reasons of public interest in the field of public health
pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
• for archival purposes in the public interest, scientific or historical
research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the
referred to in paragraph 1 is likely to contribute to the attainment of the objectives of that
renders processing impossible or seriously impairs, or
• To establish, exercise or defend legal claims.
• in accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data.
if the
• you contest the accuracy of the personal data concerning you for a period of time,
enabling the Controller to verify the accuracy of the personal data
verify data;
• the processing is unlawful and you request the erasure of the personal data
data and instead restrict the use of the
request personal data;
• the controller processes the personal data for the purposes of the processing
no longer needs it, but you need it for the purpose of asserting, exercising or
defence of legal claims, or
• You have objected to the processing pursuant to Art. 21 (1) GDPR
and it has not yet been established whether the legitimate reasons of the controller vis-à-vis
Their reasons outweigh their reasons.
If the processing of your personal data has been restricted, you may not
Data – apart from their storage – only with your consent or for the purpose of asserting it,
exercise or defence of legal claims or for the protection of the rights of another
natural or legal person, or for reasons of important public interest of the
Union or a Member State.
If the restriction of processing has been restricted in accordance with the above-mentioned conditions,
inform you by the Controller before the restriction is lifted;
• in accordance with Art. 20 GDPR, your personal data that you have provided to us in a
structured, commonly used and machine-readable format or to facilitate transmission to
request another controller. In addition, you have the right to transfer your data to a
other controllers without hindrance from the controller to whom the
provided with personal data, provided that the
• processing based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a)
GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
• the processing is carried out by automated means.
In exercising this right, you also have the right to obtain that the
personal data directly from one controller, another controller,
to the extent technically feasible. Freedoms and rights of other persons
must not be adversely affected by this.
The right to data portability does not apply to the processing of personal data that:
necessary for the performance of a task carried out in the public interest or in the
exercise of official authority vested in the controller. ;
• in accordance with Art. 7 (3) GDPR, to revoke your consent at any time.
As a result, we use the data processing based on this consent for the purposes of the
must no longer be allowed to continue in the future, and
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can
to the supervisory authority of your usual place of residence or place of work
or our headquarters.

11. Right to object
Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para.
1 sentence 1 lit. f GDPR, you have the right to object in accordance with Art. 21 GDPR
object to the processing of your personal data, where there are grounds for doing so,
arising from your particular situation or the objection to direct marketing. IIn the latter case, you have a general right to object, which can be exercised without specifying a particular situation is implemented by us. Would you like to benefit from your revocation or if you wish to exercise your right to object, it is sufficient to send an e-mail to [email protected] .
Of course, you have the right to object to the processing of your personal data for the purposes of
Object to advertising and data analysis at any time. If you wish to object, please use our contact form.

12. Up-to-dateness and changes to this privacy policy
This privacy policy is currently valid and has the status of May 2018. Through the
further development of our website and offers through it or due to changed legal regulations.
or regulatory requirements, it may be necessary to amend this privacy policy.
change. The current privacy policy can be found at any time on the website at
https://www.bauchladenmanufaktur.de/service/privacy-policy/
can be retrieved and printed by you.