Privacy policy
This English version is provided for your convenience. Only the German version of this privacy policy is legally binding.
Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Yelyzaveta Kuritsyna
Hohe Straße 10
02828 Görlitz
Germany
Email: info@rabbywolle.de
2. General information on data processing
2.1 Scope of the processing of personal data
As a matter of principle, we collect and use our users' personal data only to the extent necessary to provide a functional website as well as our content and services.
2.2 Legal bases
Where we obtain consent for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis. Where the processing of personal data is necessary for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis. Where processing is necessary to comply with a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis. Where processing is necessary for the purposes of legitimate interests pursued by us or a third party, Art. 6(1)(f) GDPR serves as the legal basis.
3. Hosting and provision of the website (Shopify)
This website is hosted by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify automatically collects and processes technical data (including the IP address, the date and time of the request and the browser type), which are stored in server log files.
Shopify is used on the basis of our legitimate interest in providing our online offering securely and efficiently pursuant to Art. 6(1)(f) GDPR and for the performance of our user agreement with Shopify pursuant to Art. 6(1)(b) GDPR.
4. Cookies
Our website uses cookies. Technically necessary cookies (e.g., for the shopping cart) are used on the basis of Art. 6(1)(f) GDPR. Cookies for analytics and marketing purposes (see section 7) are activated only after you have given your prior consent via our cookie consent tool. The legal basis for this is Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
5. Contact and customer service
If you contact us by email (e.g., at info@rabbywolle.de) or via our contact form, the data you provide (your email address, your message and, where applicable, your name and phone number) will be stored by us in order to answer your questions. The contact form is protected against spam by hCaptcha (see section 13). We delete the data collected in this context once storage is no longer necessary, or restrict its processing if statutory retention obligations apply. The legal basis is Art. 6(1)(b) or (f) GDPR.
6. Order processing
To process the contract, we collect the data required for the order (name, delivery address, email address, phone number if applicable). This data is processed to perform the purchase contract and is passed on to the shipping company commissioned with the delivery and to the payment service providers you have chosen (see section 9), insofar as this is necessary for delivering the goods or processing the payment. The legal basis is Art. 6(1)(b) GDPR.
7. Web analytics and marketing tools
This website uses the services listed below to analyze user behavior and optimize our advertising. The services are activated only after you have given your prior consent via our cookie consent tool. The legal basis is Art. 6(1)(a) GDPR. You can withdraw any consent you have given at any time with effect for the future.
7.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies or similar technologies that enable your use of the website to be analyzed. The information generated in this way is usually transferred to a Google server and stored there, although a transfer to the USA cannot be ruled out.
7.2 Meta Pixel (Facebook Pixel)
This website uses the Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). With the help of the Meta Pixel, Meta can define visitors to our website as a target audience for displaying advertisements (Facebook ads). Accordingly, we use the Meta Pixel to show the Facebook ads we place only to users who have also shown an interest in our online shop.
7.3 TikTok Pixel
This website uses the TikTok Pixel of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). The TikTok Pixel allows us to track the behavior of users after they have reached our website by clicking on a TikTok ad, and is used to measure and optimize our advertising campaigns.
8. Newsletter
If you subscribe to our newsletter, we use the email address you provide and, where applicable, your name to send you regular information about our products and offers. The newsletter is sent either via the email service integrated into Shopify (Shopify Inc., 151 O'Connor Street, Ottawa, ON, Canada) or via the external service provider Klaviyo Inc., 225 Franklin St, Boston, MA 02110, USA – depending on which service is in use at the time.
The double opt-in procedure is used for subscription: you will first receive a confirmation email asking you to confirm your subscription. This confirmation is necessary so that no one can subscribe using someone else's email address. The legal basis is Art. 6(1)(a) GDPR. You can withdraw your consent at any time, for example via the unsubscribe link in every newsletter email.
9. Payment service providers
For processing payments in our shop, we work with the following payment service providers, to whom we pass on the data required for payment processing (e.g., name, order total, account information). The legal basis is Art. 6(1)(b) GDPR.
9.1 PayPal
Payment service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg.
9.2 Credit card / Apple Pay / Google Pay (Shopify Payments)
Card payments as well as Apple Pay and Google Pay payments are processed via Shopify Payments. In the process, the data required for the respective payment method is transmitted to the technical payment service provider operating in the background (including Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland).
10. Advertising by mail
If you have ordered from us via this online shop, we occasionally use your name and postal address to send you information about our products or free yarn samples by mail. The legal basis is our legitimate interest in direct marketing to our customers pursuant to Art. 6(1)(f) GDPR.
You can object to this use of your data at any time without giving reasons, for example by email to info@rabbywolle.de. Once you have objected, we will no longer use your data for this purpose (Art. 21(2) and (3) GDPR).
11. Product reviews (Judge.me)
For product reviews, we use the Judge.me service of Judge.me Ltd, c/o Buckworths, 2nd Floor, 1–3 Worship Street, London, EC2A 2AB, United Kingdom.
You can submit a review via the link in our email after your purchase or directly on the product page. In doing so, Judge.me processes your name, your email address, your review (text, stars, photos if applicable) and the associated order data. If you submit a review on the product page, you will receive an email to confirm your email address. Using the email address and the order, we check whether you bought the product from us; only reviews with a verified purchase are published. Your name is published in shortened form (first name and first letter of the last name) together with the review. The legal basis is your consent given by submitting the review (Art. 6(1)(a) GDPR). You can withdraw your consent at any time and request the deletion of your review.
We send an email asking for a review only if you have consented to receiving promotional emails (Art. 6(1)(a) GDPR). You can object to this at any time via the unsubscribe link in the email.
The European Commission has adopted an adequacy decision for the United Kingdom (Art. 45 GDPR).
12. Blog comments
You can leave comments on the posts in our "Guide" blog (Ratgeber). In doing so, we process the data you enter (name, email address and text of the comment) and the time of submission. To detect spam and abuse, our hosting provider Shopify (see section 3) also stores your IP address and technical information about your browser (user agent) and automatically checks comments for spam.
We review every comment before it is published. Only the name you entered and the comment are published; your email address is not published. We use it only to contact you if we have questions about your comment, and not for advertising. Instead of your full name, you can also enter just your first name or a pseudonym.
The legal basis for publishing your name and your comment is the consent you give by submitting the comment (Art. 6(1)(a) GDPR). The IP address and user agent are stored on the basis of our legitimate interest in protecting the comment function against abuse and spam (Art. 6(1)(f) GDPR).
Your comment and the associated data remain stored until you request deletion or the post is removed. You can withdraw your consent at any time with effect for the future and request the deletion of your comment, for example by email to info@rabbywolle.de.
13. Spam protection (hCaptcha)
To protect our contact form, the blog comment function and the pages for logging in, creating an account and recovering a password against automated access (spam, bots), we use the hCaptcha service of Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA, via Shopify.
hCaptcha checks whether an entry was made by a human or by an automated program. For this purpose, your IP address, information about your browser and device, and how you use the page (e.g., mouse movements), among other things, are transmitted to hCaptcha and evaluated. In some cases, you will be asked to solve a short challenge.
The legal basis is our legitimate interest in protecting our website against abuse and spam (Art. 6(1)(f) GDPR). Insofar as information is stored on or read from your device in this process, this is strictly necessary for the service you have expressly requested – submitting the form (§ 25(2) no. 2 TDDDG).
Personal data may be transferred to the USA in this process. Intuition Machines, Inc. is certified under the EU-U.S. Data Privacy Framework; to that extent, the European Commission has adopted an adequacy decision for the USA (Art. 45 GDPR). You can find more information in the hCaptcha privacy policy: https://www.hcaptcha.com/privacy
14. Rights of data subjects
You have the right:
* pursuant to Art. 15 GDPR, to request access to your personal data processed by us;
* pursuant to Art. 16 GDPR, to request the rectification of inaccurate data;
* pursuant to Art. 17 GDPR, to request the erasure of your data;
* pursuant to Art. 18 GDPR, to request the restriction of processing;
* pursuant to Art. 20 GDPR, to receive your data in a structured, commonly used format (data portability);
* pursuant to Art. 7(3) GDPR, to withdraw any consent you have given at any time;
* pursuant to Art. 21 GDPR, to object to the processing of your data;
* pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority.
15. SSL/TLS encryption
For security reasons, this website uses SSL or TLS encryption to protect the transmission of confidential content.
16. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements.